2006-01-12 22:26:46 +00:00
|
|
|
|
2007-04-17 13:28:09 +00:00
|
|
|
policy_module(java,1.4.0)
|
2006-01-12 22:26:46 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
2007-03-26 18:41:45 +00:00
|
|
|
## <desc>
|
|
|
|
|
## <p>
|
|
|
|
|
## Allow java executable stack
|
|
|
|
|
## </p>
|
|
|
|
|
## </desc>
|
|
|
|
|
gen_tunable(allow_java_execstack,false)
|
|
|
|
|
|
2006-02-20 16:31:54 +00:00
|
|
|
type java_t;
|
2006-01-12 22:26:46 +00:00
|
|
|
type java_exec_t;
|
2006-04-17 17:32:54 +00:00
|
|
|
init_system_domain(java_t,java_exec_t)
|
2006-02-20 16:31:54 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Local policy
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
ifdef(`targeted_policy',`
|
2006-10-31 21:01:48 +00:00
|
|
|
# execheap is needed for itanium/BEA jrocket
|
|
|
|
|
allow java_t self:process { execstack execmem execheap };
|
2006-02-20 16:31:54 +00:00
|
|
|
role system_r types java_t;
|
2007-02-16 23:01:42 +00:00
|
|
|
|
|
|
|
|
init_dbus_chat_script(java_t)
|
|
|
|
|
|
|
|
|
|
unconfined_domain_noaudit(java_t)
|
|
|
|
|
unconfined_dbus_chat(java_t)
|
2006-02-20 16:31:54 +00:00
|
|
|
')
|
