Chris PeBenito 3ffe29
Chris PeBenito 0251df
policy_module(java,1.4.0)
Chris PeBenito 3ffe29
Chris PeBenito 3ffe29
########################################
Chris PeBenito 3ffe29
#
Chris PeBenito 3ffe29
# Declarations
Chris PeBenito 3ffe29
#
Chris PeBenito 3ffe29
Chris PeBenito 56e1b3
## <desc>
Chris PeBenito 56e1b3
## 

Chris PeBenito 56e1b3
## Allow java executable stack
Chris PeBenito 56e1b3
## 

Chris PeBenito 56e1b3
## </desc>
Chris PeBenito 56e1b3
gen_tunable(allow_java_execstack,false)
Chris PeBenito 56e1b3
Chris PeBenito 46c69c
type java_t;
Chris PeBenito 3ffe29
type java_exec_t;
Chris PeBenito cdc86e
init_system_domain(java_t,java_exec_t)
Chris PeBenito 46c69c
Chris PeBenito 46c69c
########################################
Chris PeBenito 46c69c
#
Chris PeBenito 46c69c
# Local policy
Chris PeBenito 46c69c
#
Chris PeBenito 46c69c
Chris PeBenito 46c69c
ifdef(`targeted_policy',`
Chris PeBenito d9845a
	# execheap is needed for itanium/BEA jrocket
Chris PeBenito d9845a
	allow java_t self:process { execstack execmem execheap };
Chris PeBenito 46c69c
	role system_r types java_t;
Chris PeBenito 6b19be
Chris PeBenito 6b19be
	init_dbus_chat_script(java_t)
Chris PeBenito 6b19be
Chris PeBenito 6b19be
	unconfined_domain_noaudit(java_t)
Chris PeBenito 6b19be
	unconfined_dbus_chat(java_t)
Chris PeBenito 46c69c
')