AppArmor profile for Tomcat
I am looking for an AppArmor profile to secure a Tomcat 6 on a Ubuntu Server 11.10. I am not using the pre-made Debian package but rather the latest tomcat download that starts with a .sh script so instead of a tomcat6 daemon running it's really /usr/bin/java -Djava.util.logging.config.file=...logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs etc...
I have seen the AppArmor profiles for securing it running the daemon process but how do I secure the tomcat when the linux sees it as just java?
|