Comment 0 for bug 1401084

Revision history for this message
Jacek Nykis (jacekn) wrote :

I am using apache mod_apparmor with a wordpress blog. In my rules I have:
#include <abstractions/php5>

But this did not allow all access that was needed:
apparmor="DENIED" operation="file_lock" profile="/usr/sbin/apache2//myvhost.example.com" name="/tmp/.ZendSem.Y5Ghmr" pid=21874 comm="apache2" requested_mask="k" denied_mask="k" fsuid=33 ouid=0
apparmor="DENIED" operation="file_lock" profile="/usr/sbin/apache2//myvhost.example.com" name="/tmp/.ZendSem.Y5Ghmr" pid=21874 comm="apache2" requested_mask="wk" denied_mask="wk" fsuid=33 ouid=0

This access seems to be needed by opcache module, I found some info about it here:
https://lists.ubuntu.com/archives/apparmor/2014-June/005879.html

Ubuntu 14.04.1
apparmor 2.8.95~2430-0ubuntu5.1