policy_module(java,1.2.1)

########################################
#
# Declarations
#

type java_t;
type java_exec_t;
init_system_domain(java_t,java_exec_t)

########################################
#
# Local policy
#

ifdef(`targeted_policy',`
	# execheap is needed for itanium/BEA jrocket
	allow java_t self:process { execstack execmem execheap };
	unconfined_domain_noaudit(java_t)
	role system_r types java_t;
')