Disassembler/Spotter-VM
1
0
Fork 0
Code Issues 78 Pull Requests Actions Packages Projects Releases Wiki Activity

Fix grsec attributes for Java keytool (just in case)

Browse Source
This commit is contained in:
Disassembler 2018-03-17 16:10:23 +01:00
parent 55b698a5d5
commit b298553bcf
Signed by: Disassembler
GPG Key ID: 524BD33A0EE29499
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tomcat/Dockerfile
View File

@ -5,8 +5,10 @@ RUN \
# Install Java 1.8 JRE
apk --no-cache add openjdk8-jre-base paxctl \
# Fix grsec attributes to loosen memory protection restrictions
&& paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
&& paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/java \
&& paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/keytool \
&& paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
&& paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/keytool \
# Cleanup
&& apk --no-cache del paxctl