[apparmor] [patch 2/4] mod_apparmor: add servername-uri hat
John Johansen
john.johansen at canonical.com
Sat Jul 5 05:42:16 UTC 2014
On 06/18/2014 05:26 PM, Steve Beattie wrote:
> This patch adds an additional hat to try in the mod_apparmor processing
> sequence, constructed from the host's ServerName + '-' + URI
> (e.g. 'www.example.com-/some/uri'). This hat is attempted before the raw
> URI hat is attempted, leaving the ordering as follows:
>
> (1) to a hatname in a location/directory directive
> (2) to the server name or a defined per-server default
> (3) to the server name + "-" + uri
> (4) to the uri
> (5) to DEFAULT_URI
> (6) back to the parent profile
>
> Signed-off-by: Steve Beattie <steve at nxnw.org>
Acked-by: John Johansen <john.johansen at canonical.com>
More information about the AppArmor
mailing list