--- conf/catalina.policy.orig	2016-08-05 11:13:17.192398668 -0400
+++ conf/catalina.policy	2016-08-05 11:13:40.855396127 -0400
@@ -51,6 +51,34 @@
 };
 
 
+// ========== RHEL SPECIFIC CODE PERMISSIONS =======================================
+
+// Allowing everything in /usr/share/java allows too many unknowns to be permitted
+// Specifying the individual jars that tomcat needs to function with the security manager
+// is the safest way forward.
+grant codeBase "file:/usr/share/java/tomcat-el-2.2-api.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:/usr/share/java/tomcat-jsp-2.2-api.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:/usr/share/java/tomcat-servlet-3.0-api.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:/usr/share/java/jakarta-commons-collections.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:/usr/share/java/jakarta-commons-dbcp.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:/usr/share/java/ecj.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:/usr/share/java/log4j.jar" {
+        permission java.security.AllPermission;
+};
+
+
 // ========== CATALINA CODE PERMISSIONS =======================================