selinux-policy/policy/modules/apps/java.te
2006-10-31 21:01:48 +00:00

24 lines
419 B
Plaintext

policy_module(java,1.2.1)
########################################
#
# Declarations
#
type java_t;
type java_exec_t;
init_system_domain(java_t,java_exec_t)
########################################
#
# Local policy
#
ifdef(`targeted_policy',`
# execheap is needed for itanium/BEA jrocket
allow java_t self:process { execstack execmem execheap };
unconfined_domain_noaudit(java_t)
role system_r types java_t;
')