Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-03 Thread Seth Arnold
On Wed, May 03, 2017 at 01:14:08PM +0200, Lentes, Bernd wrote: > I'm astonished that the topic vhosts/hats is so complicated. I read some > articels from german computer magazines about apparmor, and the tenor > was always "it's pretty easy". Hello Bernd, Simple uses of AppArmor are relatively

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-03 Thread John Johansen
On 05/03/2017 04:14 AM, Lentes, Bernd wrote: > > > - On May 2, 2017, at 11:10 PM, Christian Boltz appar...@cboltz.de wrote: > >> Hello, >> >> Am Dienstag, 2. Mai 2017, 11:26:36 CEST schrieb John Johansen: >>> On 05/02/2017 01:58 AM, Lentes, Bernd wrote: - On Apr 29, 2017, at 3:02

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-03 Thread Lentes, Bernd
- On May 2, 2017, at 11:10 PM, Christian Boltz appar...@cboltz.de wrote: > Hello, > > Am Dienstag, 2. Mai 2017, 11:26:36 CEST schrieb John Johansen: >> On 05/02/2017 01:58 AM, Lentes, Bernd wrote: >> > - On Apr 29, 2017, at 3:02 AM, Seth Arnold > seth.arn...@canonical.com wrote: >> >>

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-02 Thread John Johansen
On 05/02/2017 02:10 PM, Christian Boltz wrote: > Hello, > > Am Dienstag, 2. Mai 2017, 11:26:36 CEST schrieb John Johansen: >> On 05/02/2017 01:58 AM, Lentes, Bernd wrote: >>> - On Apr 29, 2017, at 3:02 AM, Seth Arnold > seth.arn...@canonical.com wrote: On Wed, Apr 26, 2017 at 08:26:10PM

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-02 Thread Christian Boltz
Hello, Am Dienstag, 2. Mai 2017, 11:26:36 CEST schrieb John Johansen: > On 05/02/2017 01:58 AM, Lentes, Bernd wrote: > > - On Apr 29, 2017, at 3:02 AM, Seth Arnold seth.arn...@canonical.com wrote: > >> On Wed, Apr 26, 2017 at 08:26:10PM +0200, Lentes, Bernd wrote: > >>> I have a SLES 10 SP4

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-02 Thread John Johansen
On 05/02/2017 02:08 AM, Lentes, Bernd wrote: > > > - On Apr 29, 2017, at 3:32 AM, John Johansen john.johan...@canonical.com > wrote: > >>> I have a SLES 10 SP4 box. I installed apparmor and the module for apache. The module is enabled. I added the following to the

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-02 Thread John Johansen
On 05/02/2017 01:58 AM, Lentes, Bernd wrote: > > > - On Apr 29, 2017, at 3:02 AM, Seth Arnold seth.arn...@canonical.com > wrote: > >> On Wed, Apr 26, 2017 at 08:26:10PM +0200, Lentes, Bernd wrote: > >> >> Hello Bernd, welcome. mod_apparmor for Apache doesn't care about name vs >> ip

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-02 Thread Lentes, Bernd
- On Apr 29, 2017, at 3:32 AM, John Johansen john.johan...@canonical.com wrote: >> >>> I have a SLES 10 SP4 box. >>> >>> I installed apparmor and the module for apache. The module is enabled. I >>> added the following to the conf-file of the vhost: >>> >>> AADefaultHatName genetrap >>>

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-05-02 Thread Lentes, Bernd
- On Apr 29, 2017, at 3:02 AM, Seth Arnold seth.arn...@canonical.com wrote: > On Wed, Apr 26, 2017 at 08:26:10PM +0200, Lentes, Bernd wrote: > > Hello Bernd, welcome. mod_apparmor for Apache doesn't care about name vs > ip hosting. However, mod_apparmor can't run the other vhosts in the

Re: [apparmor] AppArmor and virtual hosts in Apache

2017-04-28 Thread Seth Arnold
On Wed, Apr 26, 2017 at 08:26:10PM +0200, Lentes, Bernd wrote: > i'm pretty new to AppArmor and have some basic questions. > I have an apache running some virtual hosts. One vhost is accessible > from the internet. I'd like to confine that vhost with apparmor. Does > it matter if it is a

[apparmor] AppArmor and virtual hosts in Apache

2017-04-26 Thread Lentes, Bernd
Hi, i'm pretty new to AppArmor and have some basic questions. I have an apache running some virtual hosts. One vhost is accessible from the internet. I'd like to confine that vhost with apparmor. Does it matter if it is a namebased or ip-based vhost ? I have a SLES 10 SP4 box. I installed