apache2 restart problems

[Seth Arnold]

blahdeblah reported problems when deploying trusty apache2 with libapache2-mod-apparmor.

The apache2 main processes are usually run in complain mode because there were problems restarting apache. At least a few rules were needed:

To the main apache2 profile:
signal peer=/usr/sbin/apache2//HANDLING_UNTRUSTED_INPUT,

To the ^HANDLING_UNTRUSTED_INPUT hat:
signal peer=/usr/sbin/apache2,

To .. unknown hats (should be in all hats):
#include <abstractions/base> (to receive profiles from unconfined)

To abstractions/apache2-common:
Change:
@{PROC}/@{pid}/attr/current w,
to:
@{PROC}/@{pid}/attr/current rw,

Also "flags=(complain)" was removed from ^DEFAULT_URI and ^HANDLING_UNTRUSTED_INPUT

Thanks

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Christian Boltz (cboltz)]

abstractions/apache2-common was updated in trunk r2532 on 2014-06-12 (also included in 2.10 and 2.9), see bug 1322764.

I didn't check if r2532 covers everything reported in this bug.