lighttpd profile does not work
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor (Ubuntu) |
Fix Released
|
Low
|
Jamie Strandboge |
Bug Description
Binary package hint: apparmor
Binary package hint: apparmor-profiles
The apparmor profile for lighttpd provided by the apparmor-profiles package does not work out-of-the-box.
Looking over syslog, it appears there are seven types of audit entries (one of each follows):
operation="exec" profile=
operation="exec" profile=
operation="mknod" profile=
operation="open" profile=
operation="open" profile=
operation="open" profile=
operation="open" profile=
operation="open" profile=
In order to fix this, i add theses line in usr.sbin.lighttpd:
# Perl script of configuration
#include <abstractions/perl>
/usr/
/usr/
# Support PHP5 with FastCGI
#include <abstractions/php5>
/tmp/php.socket* w,
# Require mimes
/etc/mime.types r,
# Configuration
/etc/
/etc/
Related branches
Changed in apparmor (Ubuntu): | |
status: | New → Triaged |
Changed in apparmor (Ubuntu): | |
importance: | Undecided → Medium |
Changed in apparmor (Ubuntu): | |
assignee: | nobody → Jamie Strandboge (jdstrand) |
importance: | Medium → Low |
status: | Triaged → In Progress |
This bug was fixed in the package apparmor - 2.6.1-0ubuntu3
---------------
apparmor (2.6.1-0ubuntu3) natty; urgency=low
* debian/ patches/ 0003-add- debian- integration- to-lighttpd. patch: updates for patches/ 0004-lp754889. patch: add several image viewers to browsers. d/multimedia abstraction (LP: #754889) patches/ 0005-lp761217. patch: abstractions/ private- files updates for patches/ 0001-add- chromium- browser. patch: fixes for multiarch and
lighttpd example profile to work in Debian/Ubuntu (LP: #582814)
* debian/
ubuntu-
* debian/
zsh and several other shells (LP: #761217)
* debian/
crash reporter (LP: #764786)
-- Jamie Strandboge <email address hidden> Mon, 18 Apr 2011 09:23:50 -0500