1) install tomcat7 or tomcat8 with selinux {yum install tomcat7 tomcat7-selinux} 2) start service {service tomcat7 start} 3) Check the context of the running process expecting tomcat7_t {ps -eZf | grep tomcat | head -n1} 4) [optional] Check the contexts of the tomcat configuration, log dir, etc. to see that they're the correct contexts (tomcat_exec_t, tomcat_config_t, etc). {ll -Z /usr/share/tomcat7/conf/}