Java & SELinux? JNI?

Java & SELinux? JNI?

[antoine]

Has anyone written a default policy for Java 1.5?
I've just made one for Java + Tomcat 5.5 and discovered a few things
along the way: Java1.5 needs write access to /dev/random! (even when
just running or compiling things - there is a bug id for this @sun), it
also tests to see if it can execute files in /tmp/!, etc

Also, has anyone looked at providing a JNI interface to libselinux?
I could find a few uses for this where the same java instance may be
used by different contexts and would need to rely on lower level code to
enforce file access (and provide another layer of protection for file
paths trickery). It would need some fairly tight integration between the
domains and the Java code but it could be quite useful. An example of
this would be webapps in tomcat, but this could also be applied to
application contexts within the same webapp too.

Antoine


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.