[apparmor] Apache mod_apparmor problem

azurIt azurit at pobox.sk
Wed Aug 7 12:29:01 UTC 2013


Hi,

i'm trying to use mod_apparmor in Apache but every request is creating new profile inside kernel, which looks like this:
   /usr/lib/apache2/mpm-itk/apache2//DEFAULT_URI//null-1001
   /usr/lib/apache2/mpm-itk/apache2//DEFAULT_URI//null-1003
   /usr/lib/apache2/mpm-itk/apache2//DEFAULT_URI//null-1005
   /usr/lib/apache2/mpm-itk/apache2//DEFAULT_URI//null-1007
   /usr/lib/apache2/mpm-itk/apache2//DEFAULT_URI//null-1009

and so on. There are TONS of such profile after few weeks of running:
42775 profiles are in complain mode.

Am I doing something wrong?

azur



More information about the AppArmor mailing list