I just realized some strange behaviour with my
mysqld  Ver 5.7.17-0ubuntu0.16.04.1 for Linux on x86_64 ((Ubuntu))


this my.cmf parameter "default-character-set=utf8" in 
/etc/mysql/mysql.conf.d/mysqld.cnf
caused this dmesg output:

 audit: type=1400 audit(1491639131.263:200): apparmor="DENIED"
operation="open" profile="/usr/sbin/mysqld" name="/proc/8039/status"
pid=8039 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=107
ouid=107

btw:
/etc/mysql contains a link, I'm not whether this is allowed by apparmor setting:

drwxr-xr-x   2 root root  4096 Apr  7 20:07 conf.d/
-rw-------   1 root root   317 Feb 21 20:47 debian.cnf
-rwxr-xr-x   1 root root   120 Jan 18 22:46 debian-start*
lrwxrwxrwx   1 root root    24 Feb 21 20:43 my.cnf -> /etc/alternatives/my.cnf
-rw-r--r--   1 root root   839 Apr 20  2016 my.cnf.fallback
-rw-r--r--   1 root root   682 Apr 20  2016 mysql.cnf
drwxr-xr-x   2 root root  4096 Apr  8 10:14 mysql.conf.d/


but /etc/apparmor.d/usr.sbin.mysqld only specifies an "r" NOT "lr" for its 
config-dir.

# Allow config access
  /etc/mysql/** r,

(but I'm no apparmor expert)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1610765

Title:
  Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it
  to fail to start

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to