diff --git a/tomcat/Dockerfile b/tomcat/Dockerfile
index bc885ad..b570f57 100644
--- a/tomcat/Dockerfile
+++ b/tomcat/Dockerfile
@@ -5,8 +5,10 @@ RUN \
  # Install Java 1.8 JRE
  apk --no-cache add openjdk8-jre-base paxctl \
  # Fix grsec attributes to loosen memory protection restrictions
- && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
  && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/java \
+ && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/keytool \
+ && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
+ && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/keytool \
  # Cleanup
  && apk --no-cache del paxctl