[apparmor] [patch 2/4] mod_apparmor: add servername-uri hat

John Johansen john.johansen at canonical.com
Sat Jul 5 05:42:16 UTC 2014


On 06/18/2014 05:26 PM, Steve Beattie wrote:
> This patch adds an additional hat to try in the mod_apparmor processing
> sequence, constructed from the host's ServerName + '-' + URI
> (e.g. 'www.example.com-/some/uri'). This hat is attempted before the raw
> URI hat is attempted, leaving the ordering as follows:
> 
>   (1) to a hatname in a location/directory directive
>   (2) to the server name or a defined per-server default
>   (3) to the server name + "-" + uri
>   (4) to the uri
>   (5) to DEFAULT_URI
>   (6) back to the parent profile
> 
> Signed-off-by: Steve Beattie <steve at nxnw.org>

Acked-by: John Johansen <john.johansen at canonical.com>




More information about the AppArmor mailing list