Hi Kees, Thanks for the reminder. Adding
AADefaultHatName DEFAULT_URI
to the Apache config fixes it.
I am still confused by the profile though. It includes the following lines on
the top level (not in any hat!):
/ rw,
/** mrwlkix,
These don't seem to have any effect, so I would suggest to
1) either make them work again (in that case it should be necessary to set a
default hat), or
2) remove them from the policy and make it clear, that the default hat needs
to be set manually
(maybe even provide this as a default setting mods-available/apparmor.conf)
Many thanks for your help!
David
Am 31.03.2014 um 13:40 schrieb intrigeri <[email protected]>:
> Control: tag -1 + moreinfo
>
> Hi David,
>
> Kees Cook wrote (26 Dec 2013 23:39:06 GMT) :
>> I'm not sure what's happening here. Running without an AAHatName should
>> result in a hat name of "DEFAULT_URI". Try setting AAHatName in your
>> top-level apache configuration?
>
> Did you have time to try this?
>
> Cheers,
> --
> intrigeri
> | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
> | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
smime.p7s
Description: S/MIME cryptographic signature
