From b298553bcf26bf8d57848e733625b0f1571e9f8f Mon Sep 17 00:00:00 2001
From: Disassembler <disassembler@dasm.cz>
Date: Sat, 17 Mar 2018 16:10:23 +0100
Subject: [PATCH] Fix grsec attributes for Java keytool (just in case)

---
 tomcat/Dockerfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tomcat/Dockerfile b/tomcat/Dockerfile
index bc885ad..b570f57 100644
--- a/tomcat/Dockerfile
+++ b/tomcat/Dockerfile
@@ -5,8 +5,10 @@ RUN \
  # Install Java 1.8 JRE
  apk --no-cache add openjdk8-jre-base paxctl \
  # Fix grsec attributes to loosen memory protection restrictions
- && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
  && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/java \
+ && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/keytool \
+ && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
+ && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/keytool \
  # Cleanup
  && apk --no-cache del paxctl