Blame policy/modules/apps/java.te
|
Chris PeBenito |
3ffe29 |
|
|
Chris PeBenito |
ff943a |
policy_module(java,1.3.1)
|
|
Chris PeBenito |
3ffe29 |
|
|
Chris PeBenito |
3ffe29 |
########################################
|
|
Chris PeBenito |
3ffe29 |
#
|
|
Chris PeBenito |
3ffe29 |
# Declarations
|
|
Chris PeBenito |
3ffe29 |
#
|
|
Chris PeBenito |
3ffe29 |
|
|
Chris PeBenito |
46c69c |
type java_t;
|
|
Chris PeBenito |
3ffe29 |
type java_exec_t;
|
|
Chris PeBenito |
cdc86e |
init_system_domain(java_t,java_exec_t)
|
|
Chris PeBenito |
46c69c |
|
|
Chris PeBenito |
46c69c |
########################################
|
|
Chris PeBenito |
46c69c |
#
|
|
Chris PeBenito |
46c69c |
# Local policy
|
|
Chris PeBenito |
46c69c |
#
|
|
Chris PeBenito |
46c69c |
|
|
Chris PeBenito |
46c69c |
ifdef(`targeted_policy',`
|
|
Chris PeBenito |
d9845a |
# execheap is needed for itanium/BEA jrocket
|
|
Chris PeBenito |
d9845a |
allow java_t self:process { execstack execmem execheap };
|
|
Chris PeBenito |
46c69c |
unconfined_domain_noaudit(java_t)
|
|
Chris PeBenito |
46c69c |
role system_r types java_t;
|
|
Chris PeBenito |
46c69c |
')
|