[apparmor] [patch] abstractions/mysql: allow access to mysqld.sock
Felix Geyer
debfx at ubuntu.com
Mon Apr 28 20:51:39 UTC 2014
The path of the MySQL socket is often named mysqld.sock instead
of mysql.sock.
For example in Ubuntu trusty it is /run/mysqld/mysqld.sock.
Allow access to all combinations of mysql and mysqld in the abstraction.
=== modified file 'profiles/apparmor.d/abstractions/mysql'
--- profiles/apparmor.d/abstractions/mysql 2013-01-13 13:38:28 +0000
+++ profiles/apparmor.d/abstractions/mysql 2014-04-28 20:42:14 +0000
@@ -9,7 +9,7 @@
#
# ------------------------------------------------------------------
- /var/lib/mysql/mysql.sock rw,
- /{var/,}run/mysql/mysql.sock rw,
+ /var/lib/mysql{,d}/mysql{,d}.sock rw,
+ /{var/,}run/mysql{,d}/mysql{,d}.sock rw,
/usr/share/{mysql,mysql-community-server,mariadb}/charsets/ r,
/usr/share/{mysql,mysql-community-server,mariadb}/charsets/*.xml r,
More information about the AppArmor
mailing list