[apparmor] [patch] abstractions/mysql: allow access to mysqld.sock

Felix Geyer debfx at ubuntu.com
Mon Apr 28 20:51:39 UTC 2014


The path of the MySQL socket is often named mysqld.sock instead
of mysql.sock.
For example in Ubuntu trusty it is /run/mysqld/mysqld.sock.
Allow access to all combinations of mysql and mysqld in the abstraction.

=== modified file 'profiles/apparmor.d/abstractions/mysql'
--- profiles/apparmor.d/abstractions/mysql	2013-01-13 13:38:28 +0000
+++ profiles/apparmor.d/abstractions/mysql	2014-04-28 20:42:14 +0000
@@ -9,7 +9,7 @@
 #
 # ------------------------------------------------------------------

-   /var/lib/mysql/mysql.sock rw,
-   /{var/,}run/mysql/mysql.sock rw,
+   /var/lib/mysql{,d}/mysql{,d}.sock rw,
+   /{var/,}run/mysql{,d}/mysql{,d}.sock rw,
    /usr/share/{mysql,mysql-community-server,mariadb}/charsets/ r,
    /usr/share/{mysql,mysql-community-server,mariadb}/charsets/*.xml r,




More information about the AppArmor mailing list