[Bug 434915] Re: mysql-server-5.1 can't chroot
Running a process confined and chrooting are typically two different, mutually-exclusive solutions to the same problem. The apparmor profile contains mysqld in a similar way that the traditional chrooting does. There is no reason to chroot mysqld on Ubuntu if you are using the AppArmor profile. The reason why the profile was developed was so that all mysqld users would benefit from the enhanced security of running mysqld under confinement, and not require users to have to diverge from the standard installation and use chroot. Users are welcome to use traditional chrooting if they prefer, and need only disable the apparmor profile by performing: $ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld $ ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/usr.sbin.mysqld The first unloads the profile from the kernel, and the second disables the profile on boot. ** Changed in: mysql-dfsg-5.1 (Ubuntu) Status: Incomplete = Won't Fix ** Changed in: mysql-dfsg-5.1 (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
hmmm, sorry for my incomprehension, but I don't understand why MySQL 5.0 works with apparmor in chroot, and MySQL 5.1 does not? Only this is my problem, everything else is clear for me. Thank you: a. -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
Running a process confined and chrooting are typically two different, mutually-exclusive solutions to the same problem. The apparmor profile contains mysqld in a similar way that the traditional chrooting does. There is no reason to chroot mysqld on Ubuntu if you are using the AppArmor profile. The reason why the profile was developed was so that all mysqld users would benefit from the enhanced security of running mysqld under confinement, and not require users to have to diverge from the standard installation and use chroot. Users are welcome to use traditional chrooting if they prefer, and need only disable the apparmor profile by performing: $ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld $ ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/usr.sbin.mysqld The first unloads the profile from the kernel, and the second disables the profile on boot. ** Changed in: mysql-dfsg-5.1 (Ubuntu) Status: Incomplete = Won't Fix ** Changed in: mysql-dfsg-5.1 (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
hmmm, sorry for my incomprehension, but I don't understand why MySQL 5.0 works with apparmor in chroot, and MySQL 5.1 does not? Only this is my problem, everything else is clear for me. Thank you: a. -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 434915] Re: mysql-server-5.1 can't chroot
Dear Mathias, Thank you for taking the time to report this issue and helping to make Ubuntu better. We appreciate the difficulties you are facing - why are you running mysqld in a chroot? may be I don't understand your question why are you running mysqld in a chroot... There are several answer to this question, everybody can choice a good ideology :) My choice is more security, since few years ago I didn't install mysql (and many other netservice) without chroot - I would like to use that in the future. Thanks: a. -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
** Package changed: ubuntu = mysql-dfsg-5.1 (Ubuntu) -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
Thank you for taking the time to report this issue and helping to make Ubuntu better. We appreciate the difficulties you are facing - why are you running mysqld in a chroot? ** Changed in: mysql-dfsg-5.1 (Ubuntu) Importance: Undecided = Low ** Changed in: mysql-dfsg-5.1 (Ubuntu) Status: New = Incomplete -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
** Package changed: ubuntu = mysql-dfsg-5.1 (Ubuntu) -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 434915] Re: mysql-server-5.1 can't chroot
Thank you for taking the time to report this issue and helping to make Ubuntu better. We appreciate the difficulties you are facing - why are you running mysqld in a chroot? ** Changed in: mysql-dfsg-5.1 (Ubuntu) Importance: Undecided = Low ** Changed in: mysql-dfsg-5.1 (Ubuntu) Status: New = Incomplete -- mysql-server-5.1 can't chroot https://bugs.launchpad.net/bugs/434915 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
