Vhosts Directives; Location And Directory Directives - Novell APPARMOR Admin Manual

Apache Configuration for mod_change_hat

vhosts Directives

Vhosts directives control whether requests that contain trailing path-
name information, following an actual filename (or non-existent file in
an existing directory), will be accepted or rejected. For Apache docu-
mentation on Virtual Host directives, refer to
http://httpd.apache.org/docs-2.0/mod/core.html#vir-
tualhost
The change_hat specific configuration keyword is ImmDefaultHat-
Name and is used similarly to ImmHatName, for example ImmDe-
faultHatName My_Funky_Default_Hat.
The configuration option is actually based on what's called a server
directive, which enables you to use the keyword outside of other
options, thereby setting it for the default server. Virtual hosts are con-
sidered internally within apache to be seperate "servers", so you can
set a default hat name for the default server, as well as one for each
virtual host, if desired.
When a request comes in to be handled, the following steps reflect the
sequence in which mod_change_hat attempts to apply hats.
1. A location/directory hat as specified by the ImmHatName keyword.
2. A hat named by the entire URI path.
3. A default server hat as specified by the ImmDefaultHatName key-
word.
4. DEFAULT_URI (and if none of those exist, it'll go back to the "par-
ent" apache hat).

Location and Directory Directives

Location and Directory directives specify Hat names in the program
configuration file so the program calls the hat regarding its security.
For Apache, you can find documentation about Location and Directory
directive at http://httpd.apache.org/docs-2.0/sections.html.
The Location Directive example below specifies that for a given loca-
87