I am building an AppArmor policy for
nginx in Ubuntu 14.04 and I cannot make it work without enabling the
nginx really need this enabled or is there some way to work around it? Overriding all discretionary access control looks risky, but perhaps it's common within the AppArmor constraints.
nginx runs fine unconfined, so I don't think there is a permission issue, but I'm new to AppArmor so I may be wrong.