[apparmor] Apparmor profiles for multiple instances of the same application
Mark Wadham
ubuntu at rkw.io
Tue Jul 26 10:38:45 UTC 2016
Nevermind, figured it out using child profiles as Seth suggested for my
other question :)
On 26 Jul 2016, at 9:38, Mark Wadham wrote:
> Say I have a bunch of ruby applications that all start rack, eg:
>
> cd /path/to/webapp
> rackup
>
> And then the configuration is taken from the local config.ru.
>
> I'd like to lock each webapp down to it's own paths but I'm not sure
> how to target them given that they all start up with the same rackup
> executable. Is there a way to modify the profiles at startup time
> based on environment variables or something like that?
>
> Thanks,
> Mark
More information about the AppArmor
mailing list