Merge lp:~intrigeri/apparmor/apache2-attach_disconnected into lp:apparmor/2.12

[intrigeri]

[Steve Beattie (sbeattie)]

I don't particularly care for how we've had to sprinkle attach_disconnected around in profiles recently, but given that I would hope anyone actually developing profiles for apache with mod_apparmor would roll their own, so I think it's okay for the "mostly works out of the box" example profile nature of the included apache profile.

Thanks.

review: Approve

=== modified file 'profiles/apparmor.d/usr.sbin.apache2'
--- profiles/apparmor.d/usr.sbin.apache2	2014-09-09 01:39:34 +0000
+++ profiles/apparmor.d/usr.sbin.apache2	2017-09-20 14:46:35 +0000
@@ -1,7 +1,7 @@
 # Author: Marc Deslauriers <[e-mail]>
 
 #include <tunables/global>
-/usr/sbin/apache2 {
+/usr/sbin/apache2 flags=(attach_disconnected) {
 
   # This profile is completely permissive.
   # It is designed to target specific applications using mod_apparmor,
@@ -84,7 +84,7 @@
   /** mrwlkix,
 
 
-  ^DEFAULT_URI {
+  ^DEFAULT_URI flags=(attach_disconnected) {
     #include <abstractions/base>
     #include <abstractions/apache2-common>
 
@@ -92,7 +92,7 @@
     /** mrwlkix,
   }
 
-  ^HANDLING_UNTRUSTED_INPUT {
+  ^HANDLING_UNTRUSTED_INPUT flags=(attach_disconnected) {
     #include <abstractions/apache2-common>
 
     / rw,