File Access Policy - dogtagpki/pki GitHub Wiki
The rules for each PKI server are defined in /usr/share/pki/server/etc/fapolicy.rules and deployed into /etc/fapolicyd/rules.d/61-pki-<instance>.rules
:
allow perm=open dir=/usr/lib/jvm/ : dir=/var/lib/pki/<instance>/work/