[apparmor] Apparmor profiles for multiple instances of the same application

Mark Wadham ubuntu at rkw.io
Tue Jul 26 08:38:19 UTC 2016


Say I have a bunch of ruby applications that all start rack, eg:

cd /path/to/webapp
rackup

And then the configuration is taken from the local config.ru.

I'd like to lock each webapp down to it's own paths but I'm not sure how 
to target them given that they all start up with the same rackup 
executable.  Is there a way to modify the profiles at startup time based 
on environment variables or something like that?

Thanks,
Mark



More information about the AppArmor mailing list