apache2 abstraction incomplete
Bug #1658238 reported by
Kees Cook
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | ||
|---|---|---|---|---|---|---|
| AppArmor | Status tracked in Master | |||||
| 2.10 |
Fix Released
|
Undecided
|
Unassigned | |||
| 2.11 |
Fix Released
|
Undecided
|
Unassigned | |||
| 2.9 |
Fix Released
|
Undecided
|
Unassigned | |||
| Master |
Fix Released
|
Undecided
|
Unassigned | |||
| apparmor (Ubuntu) |
New
|
Undecided
|
Unassigned | |||
Bug Description
Apache2 needs updates for proper signal handling, optional saslauth, and OCSP stapling...
--- apache2-common 2014-06-24 11:06:06.000000000 -0700
+++ /etc/apparmor.
@@ -8,6 +8,8 @@
signal (receive) peer=unconfined,
# Allow apache to send us signals by default
signal (receive) peer=/usr/
+ # Allow other hats to signal by default
+ signal peer=/usr/
# Allow us to signal ourselves
signal peer=@{
@@ -25,3 +27,12 @@
/dev/urandom r,
+ # sasl-auth
+ /run/saslauthd/mux rw,
+
+ # OCSP stapling
+ /var/log/
Revision history for this message
| Seth Arnold (seth-arnold) wrote | #1 |
To post a comment you must log in.
Committed revision 3625.
Committed revision 3381.
Committed revision 3046.
Thanks