@bill: nope, webapps don't get any extra permissions: they are constrained by the lifecycle and apparmor policy like any other application.
@bill: nope, webapps don't get any extra permissions: they are constrained by the lifecycle and apparmor policy like any other application.