[PHP-DEV] [PROPOSAL] apparmor change_hat functionality in fpm

2013-05-15 Thread Gernot Vormayr
Hi! The basic idea behind this is to get a better seperation of different php pools (so e.g. php scripts from one pool can't access the other and vice versa). I did a small patch (https://github.com/php/php-src/pull/343) that adds a configuration parameter to pools (apparmor_hat). If this is set,

[PHP-DEV] [PROPOSAL] apparmor change_hat functionality in fpm

2013-05-15 Thread Gernot Vormayr
Hi! The basic idea behind this is to get a better seperation of different php pools (so e.g. php scripts from one pool can't access the other and vice versa). I did a small patch (https://github.com/php/php-src/pull/343) that adds a configuration parameter to pools (apparmor_hat). If this is set,