On 09/08/2014 05:27 PM, Jamie Strandboge wrote: > Index: apparmor-2.8.96~2652/profiles/apparmor.d/usr.sbin.apache2 > =================================================================== > --- apparmor-2.8.96~2652.orig/profiles/apparmor.d/usr.sbin.apache2 > +++ apparmor-2.8.96~2652/profiles/apparmor.d/usr.sbin.apache2 > @@ -53,13 +53,20 @@ > # 2- Enable the main apache2 profile > # sudo aa-enforce /etc/apparmor.d/usr.sbin.apache2 > # > - # 3- Configure apache with the following: > + # 3- Configure apache with the following (or similar): > + # Alias /phpsysinfo /usr/share/phpsysinfo > + # <Location /phpsysinfo> > + # <IfModule mod_apparmor.c> > + # AAHatName phpsysinfo > + # </IfModule> > # > - # <Directory /var/www/phpsysinfo/> > - # <IfModule mod_apparmor.c> > - # AAHatName phpsysinfo > - # </IfModule> > - # </Directory> > + # # adjust as necessary: > + # Options None > + # Order allow,deny > + # Allow from localhost 127.0.0.0/8 ::1 > + # Allow from 192.168.0.0/16 > + # # Allow from All
Just a minor nitpick: the "Order", "Allow from" and "Allow from All" should IMHO be replaced by the newer directives: Require local Require ip 192.168.0.0/16 This avoids a dependency on the access_compat.so module (even if it's in Ubuntu's default). Regards, Simon -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
