Re: Feedback on Java applet functionality?

[Andrew Haley <aph redhat com>]

Hans de Goede writes:
 > 
 > Andrew Haley wrote:
 > > Jesse Keating writes:
 > >  > On Friday 11 August 2006 16:29, Andrew Haley wrote:
 > >  > > No.  It requires execmem because it really needs it.
 > >  > 
 > >  > Then it really needs to be fixed.
 > > 
 > > It doesn't need to be fixed becasue it's not a bug.  We generate code
 > > on the fly because it's the right thing to do.  There's nothing
 > > special about gcj in this regard: generating code on the fly is not
 > > unusual, and it's a valid techinique.
 > 
 > Yes and there are ways to make it work without tripping over selinux's
 > execmem check, see:
 > https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185214#c4

Red Hat Enterprise Linux marks gcj apps and other Java VMs
system_u:object_r:java_exec_t.  This gives us the permissions we need.

Andrew.