[apparmor] Apparmor profiles for multiple instances of the same application

Mark Wadham ubuntu at rkw.io
Tue Jul 26 10:38:45 UTC 2016


Nevermind, figured it out using child profiles as Seth suggested for my 
other question :)

On 26 Jul 2016, at 9:38, Mark Wadham wrote:

> Say I have a bunch of ruby applications that all start rack, eg:
>
> cd /path/to/webapp
> rackup
>
> And then the configuration is taken from the local config.ru.
>
> I'd like to lock each webapp down to it's own paths but I'm not sure 
> how to target them given that they all start up with the same rackup 
> executable.  Is there a way to modify the profiles at startup time 
> based on environment variables or something like that?
>
> Thanks,
> Mark



More information about the AppArmor mailing list