ren's questions

So I set up apache2 to serve web service. The only consumer of it (and the whole server) will be .net web application. Firstly, is it correct to assume that this way apache will only see one client? If it is correct then how do I optimize it in this light? Specifically, would it be correct to do something like:

MaxKeepAliveRequests 0  #instead of MaxKeepAliveRequests 100

KeepAliveTimeout 300 #instead of KeepAliveTimeout 15

so it seems I have everything installed, but apparmor_status gives "apparmor module is not loaded." Also some apparmor scripts check for presence of /sys/module/apparmor and it is not there... Any idea of what is wrong?

Oh and it's virtual server using OpenVZ

so I have:

#include <tunables/global>

/usr/bin/python2.7 {
    /** mixrw,
    deny /** lwk,
}

/usr/lib/jvm/java-6-openjdk/jre/bin/java {
    /** mixrw,
    deny /** lwk,
}

/var/www/service/usercode/*/a.out {
    /** mixrw,
    #deny /** lwk,
}

How could I make it something like this:

#include <tunables/global>

/usr/bin/python2.7 
/usr/lib/jvm/java-6-openjdk/jre/bin/java
/var/www/service/usercode/*/a.out
{
    /** mixrw,
    deny /** lwk,
}

I'm using Ubuntu 11.04 as a dedicated server. I installed mod_mono and mono-xsp2 on apache as described here. Apache serves .aspx or .asmx files as files, literally. I checked and mod_mono is enabled. What could be wrong? Should I state somewhere that the mono handler should be used? xsp serves just fine.

apache2 seem to start new processes with www-data user. How could I make it start new processes with some other user? ubuntu 11.04 by the way.

I'm pretty new at this. So I figured out that apache2 starts processes as www-data user. Suppose this user then starts untrusted code. What if I wanted to disallow this user to read any files (like /etc/fstab for example). How would I go about this? Ubuntu 11.04 by the way.