Feedback on Java applet functionality?
Andrew Haley
aph at redhat.com
Fri Aug 11 21:14:52 UTC 2006
Hans de Goede writes:
>
> Andrew Haley wrote:
> > Jesse Keating writes:
> > > On Friday 11 August 2006 16:29, Andrew Haley wrote:
> > > > No. It requires execmem because it really needs it.
> > >
> > > Then it really needs to be fixed.
> >
> > It doesn't need to be fixed becasue it's not a bug. We generate code
> > on the fly because it's the right thing to do. There's nothing
> > special about gcj in this regard: generating code on the fly is not
> > unusual, and it's a valid techinique.
>
> Yes and there are ways to make it work without tripping over selinux's
> execmem check, see:
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185214#c4
Red Hat Enterprise Linux marks gcj apps and other Java VMs
system_u:object_r:java_exec_t. This gives us the permissions we need.
Andrew.
More information about the fedora-devel-list
mailing list