From: cgzones@googlemail.com (=?UTF-8?Q?Christian_G=C3=B6ttsche?=)
Date: Fri, 14 Apr 2017 11:32:58 +0200
Subject: [refpolicy] [PATCH 1/10] java: enable interactive use
In-Reply-To: <1492125863.14193.39.camel@trentalancia.net>
References: <1492125863.14193.39.camel@trentalancia.net>
Message-ID: <CAJ2a_Df1RvyCGOr=3pThwmaA_+f8FjRFj8jojj9UMu50wzk23w@mail.gmail.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

2017-04-14 1:24 GMT+02:00 Guido Trentalancia via refpolicy
<refpolicy@oss.tresys.com>:
> This patch is required for java to print messages to
> the user terminals (interactive java applications use).
>
> Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
> ---
>  policy/modules/contrib/java.te |    7 +++++++
>  1 file changed, 7 insertions(+)
>
> --- refpolicy-2.20170204-orig/policy/modules/contrib/java.te    2017-02-04 19:30:39.000000000 +0100
> +++ refpolicy-2.20170204/policy/modules/contrib/java.te 2017-04-09 16:24:20.039657686 +0200
> @@ -132,6 +132,13 @@ tunable_policy(`allow_java_execstack',`
>
>  auth_use_nsswitch(java_t)
>
> +corecmd_read_bin_symlinks(java_t)

corecmd_read_bin_symlinks() has been deprecated by corecmd_search_bin()

> +
> +locallogin_use_fds(java_t)
> +
> +userdom_read_user_tmp_files(java_t)
> +userdom_use_user_ttys(java_t)

maybe use userdom_use_inherited_user_terminals()?

> +
>  optional_policy(`
>         xserver_user_x_domain_template(java, java_t, java_tmpfs_t)
>  ')
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy