Q:java based application about refpolicy HOT 5 CLOSED

java_t does not have execstack by default, you have to enable the allow_java_execstack boolean.

Related question about java_t, its execstack permission, what to do with it. This permission is related to libjvm.so when running java_exec_t

I don't understand the question.

from refpolicy.

I rethought my question.

1)how to define ide_t domain as java application
user_t->ide_exec_t->ide_t (java template)

2. about execstack:
   with java running, need execstack call by libjvm.so
   you can't help here, it's a java problem (

from refpolicy.

it sounds like you should add allow ide_t self:process execstack;

from refpolicy.

How to declare domain for java application?

from refpolicy.

There is no special way to declare a domain for java.

from refpolicy.