28.11.2016 15:13, Robie Basak пишет:
> Thank you for taking the time to report this bug and helping to make
> Ubuntu better.
>
>> I suppose either apparmor should permit it or mysqld should not try to
> read it on startup.
>
> Agreed. I don't think mysqld should be trying to read that on regular
> daemon startup. Can you reproduce this in mysql-5.7 please, from at
> least on 16.04? 12.04 is quite old now, and I don't think there is any
> point in fixing something that is only a warning in a stable release. So
> this bug is only interesting for what is current today.
>
Hello!

Now I have new system and can check. It still there:

Jan 25 20:05:02 host kernel: [930789.456245] audit: type=1400 
audit(1485363902.254:18): apparmor="DENIED" operation="open" 
profile="/usr/sbin/mysqld" name="/root/.my.cnf" pid=26838 comm="mysqld" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0

System details:

# uname -sr
Linux 4.4.0-57-generic

# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 16.04.1 LTS
Release:        16.04
Codename:       xenial

# mysqld --version
mysqld  Ver 5.7.17-0ubuntu0.16.04.1 for Linux on x86_64 ((Ubuntu))

PS: please note it has UID mysqld and will not have a chance to read 
root's file anyway.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1641305

Title:
  apparmor configuration for mysqld is not complete

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.5/+bug/1641305/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to