policy/modules/apps/java.te

   1
   2 policy_module(java, 1.8.0)
   3
   4 ########################################
   5 #
   6 # Declarations
   7 #
   8
   9 ## <desc>
  10 ## <p>
  11 ## Allow java executable stack
  12 ## </p>
  13 ## </desc>
  14 gen_tunable(allow_java_execstack, false)
  15
  16 type java_t;
  17 type java_exec_t;
  18 init_system_domain(java_t, java_exec_t)
  19
  20 ########################################
  21 #
  22 # Local policy
  23 #
  24
  25 # execheap is needed for itanium/BEA jrocket
  26 allow java_t self:process { execstack execmem execheap };
  27
  28 init_dbus_chat_script(java_t)
  29
  30 optional_policy(`
  31         unconfined_domain_noaudit(java_t)
  32         unconfined_dbus_chat(java_t)
  33 ')