diff --git a/devel/jdk/1.4/Makefile b/devel/jdk/1.4/Makefile
index 382bc6d50fe..78a422baa94 100644
--- a/devel/jdk/1.4/Makefile
+++ b/devel/jdk/1.4/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.2 2005/02/04 17:06:45 kurt Exp $
+# $OpenBSD: Makefile,v 1.3 2005/02/06 22:06:34 sturm Exp $
 # $FreeBSD: /repoman/r/pcvs/ports/java/jdk14/Makefile,v 1.79 2004/08/18 07:06:03 glewis Exp $
 
 ONLY_FOR_ARCHS= 	i386
@@ -114,6 +114,7 @@ JDKHOME=		jdk-${V}
 JREHOME=		jre-${V}
 
 SUBST_VARS=		JDKHOME JREHOME
+SYSTRACE_SUBST_VARS=	LOCALBASE
 
 # Deal with Sun's internal build structure
 WRKDIST=		${WRKDIR}
diff --git a/devel/jdk/1.4/systrace.policy b/devel/jdk/1.4/systrace.policy
new file mode 100644
index 00000000000..34929e0eed5
--- /dev/null
+++ b/devel/jdk/1.4/systrace.policy
@@ -0,0 +1,148 @@
+# $OpenBSD: systrace.policy,v 1.1 2005/02/06 22:06:34 sturm Exp $
+Policy: ${WRKDIR}/unpack, Emulation: linux
+	linux-brk: permit
+	linux-close: permit
+	linux-exit: permit
+	linux-fsread: true then permit
+	linux-fstat64: permit
+	linux-fswrite: filename match "${WRKDIR}" then permit
+	linux-fswrite: filename match "/tmp" then permit
+	linux-getegid: permit
+	linux-geteuid: permit
+	linux-getgid: permit
+	linux-getuid: permit
+	linux-mmap: permit
+	linux-mremap: permit
+	linux-munmap: permit
+	linux-read: permit
+	linux-uname: permit
+	linux-write: permit
+	linux-writev: permit
+
+Policy: ${LOCALBASE}/jdk1.3.1-linux/bin/i386/green_threads/jar, Emulation: linux
+	linux-brk: permit
+	linux-close: permit
+	linux-exit: permit
+	linux-fcntl64: permit
+	linux-fsread: true then permit
+	linux-fstat64: permit
+	linux-fswrite: filename match "${WRKDIR}" then permit
+	linux-fswrite: filename match "/tmp" then permit
+	linux-getcwd: permit
+	linux-getdents64: permit
+	linux-getegid: permit
+	linux-geteuid: permit
+	linux-getgid: permit
+	linux-getpid: permit
+	linux-getrlimit: permit
+	linux-gettimeofday: permit
+	linux-getuid: permit
+	linux-ioctl: permit
+	linux-llseek: permit
+	linux-lstat64: permit
+	linux-mmap: permit
+	linux-mprotect: permit
+	linux-mremap: permit
+	linux-munmap: permit
+	linux-read: permit
+	linux-rt_sigaction: permit
+	linux-rt_sigprocmask: permit
+	linux-setrlimit: permit
+	linux-socketcall: permit
+	linux-stat64: permit
+	linux-time: permit
+	linux-uname: permit
+	linux-write: permit
+	linux-writev: permit
+
+Policy: ${LOCALBASE}/jdk1.3.1-linux/bin/i386/green_threads/java, Emulation: linux
+	linux-brk: permit
+	linux-close: permit
+	linux-exit: permit
+	linux-fcntl64: permit
+	linux-fsread: true then permit
+	linux-fstat64: permit
+	linux-fswrite: filename match "${WRKDIR}" then permit
+	linux-fswrite: filename match "/tmp" then permit
+	linux-getcwd: permit
+	linux-getdents64: permit
+	linux-getegid: permit
+	linux-geteuid: permit
+	linux-getgid: permit
+	linux-getpid: permit
+	linux-getrlimit: permit
+	linux-gettimeofday: permit
+	linux-getuid: permit
+	linux-ioctl: permit
+	linux-llseek: permit
+	linux-lstat64: permit
+	linux-mmap: permit
+	linux-mprotect: permit
+	linux-munmap: permit
+	linux-read: permit
+	linux-rt_sigaction: permit
+	linux-rt_sigprocmask: permit
+	linux-setrlimit: permit
+	linux-socketcall: permit
+	linux-stat64: permit
+	linux-time: permit
+	linux-uname: permit
+	linux-write: permit
+	linux-writev: permit
+
+Policy: ${LOCALBASE}/jdk1.3.1-linux/bin/i386/green_threads/javac, Emulation: linux
+	linux-brk: permit
+	linux-close: permit
+	linux-exit: permit
+	linux-fcntl64: permit
+	linux-fsread: true then permit
+	linux-fstat64: permit
+	linux-fswrite: filename match "${WRKDIR}" then permit
+	linux-fswrite: filename match "/tmp" then permit
+	linux-getcwd: permit
+	linux-getdents64: permit
+	linux-getegid: permit
+	linux-geteuid: permit
+	linux-getgid: permit
+	linux-getpid: permit
+	linux-getrlimit: permit
+	linux-gettimeofday: permit
+	linux-getuid: permit
+	linux-ioctl: permit
+	linux-llseek: permit
+	linux-lstat64: permit
+	linux-mmap: permit
+	linux-mprotect: permit
+	linux-munmap: permit
+	linux-read: permit
+	linux-rt_sigaction: permit
+	linux-rt_sigprocmask: permit
+	linux-setrlimit: permit
+	linux-socketcall: permit
+	linux-stat64: permit
+	linux-time: permit
+	linux-uname: permit
+	linux-write: permit
+	linux-writev: permit
+
+Policy: ${LOCALBASE}/jdk1.3.1-linux/jre/bin/i386/realpath, Emulation: linux
+	linux-brk: permit
+	linux-close: permit
+	linux-exit: permit
+	linux-fsread: true then permit    
+	linux-fstat64: permit
+	linux-fswrite: filename match "${WRKDIR}" then permit
+	linux-fswrite: filename match "/tmp" then permit
+	linux-getegid: permit
+	linux-geteuid: permit
+	linux-getgid: permit
+	linux-getuid: permit
+	linux-lstat64: permit
+	linux-mmap: permit
+	linux-mremap: permit
+	linux-munmap: permit
+	linux-read: permit
+	linux-uname: permit
+	linux-write: permit
+	linux-writev: permit
+