Ubuntu
mysql-5.1 package

AppArmor Denied

Bug #619172 reported by Mark Schmidt
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
mysql-5.1 (Ubuntu)
Fix Released
Low
Unassigned

Bug Description

I get error messages like the following running mysqld (5.1.49-1ubuntu5) on maverick amd64 with all updates applied:
type=1400 audit(1282044200.046:1660): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/mysqld" pid=20200 comm="apparmor_parser"
type=1400 audit(1282044200.046:1661): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/mysqld" name="/etc/mysql/debian.cnf" pid=20204 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

A fix is to edit
/etc/apparmor.d/usr.sbin.mysqld"
and replace the line
  /etc/mysql/my.cnf r,
with
  /etc/mysql/*.cnf r,

Related branches

lp://staging/ubuntu/maverick/mysql-5.1
lp://staging/~clint-fewbar/ubuntu/maverick/mysql-5.1/maverick-beta-papercuts
Thierry Carrez (community): Disapprove
Ubuntu branches: Pending requested
Diff: 124 lines (+18/-31)
4 files modified
debian/additions/my.cnf (+1/-1)
debian/apparmor-profile (+2/-1)
debian/changelog (+14/-29)
debian/mysql-server-5.1.mysql.upstart (+1/-0)
Revision history for this message
Mathias Gug (mathiaz) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better.

Could you please provide the following information:
 * mysqld apparmor profile and abstraction:
    /etc/apparmor.d/usr.sbin.mysqld
    /etc/apparmor.d/abstractions/mysqld

Changed in mysql-5.1 (Ubuntu):
importance: Undecided → Low
status: New → Incomplete
Revision history for this message
Mark Schmidt (schmidtm) wrote :

Here are the files that you requested
/etc/apparmor.d/usr.sbin.mysqld (original version) and a diff (usr.sbin.mysqld.diff) to my fixed version
/etc/apparmor.d/abstractions/mysql

Revision history for this message
Mark Schmidt (schmidtm) wrote :

2nd part

Revision history for this message
Mark Schmidt (schmidtm) wrote :

and finally the diff

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

I ACK this patch.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package mysql-5.1 - 5.1.49-1ubuntu6

---------------
mysql-5.1 (5.1.49-1ubuntu6) maverick; urgency=low

  [Clint Byrum]
  * Installing mysql_config_pic in /usr/bin so users of libmysqld-pic
    can extract the appropriate compile flags. (LP: #605021)

  [Chuck Short]
  * debian/mysql-server.5.1.postinst: Specify the mysql user when installing
    the mysql databases. (LP: #591875)
  * debian/apparmor-profile: Update apparmor profile for mysql plugins.
    (LP: #594932, #619172)
 -- Chuck Short <email address hidden> Fri, 20 Aug 2010 10:12:48 -0400

Changed in mysql-5.1 (Ubuntu):
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.