[Bug 986892] Re: mysql-server postrm breaks apparmor profile for later versions on purge

[Aymeric PETIT]

@Scott

I'm unable to restore the environment in which I found that bug, looks
like an upgrade of an other package changed something in apparmor that
fix this bug.

I will try to upgrade (to precise) a backup of my system taken in
December (version is natty) with and without -proposed.

Stay in touch for result.

Regards,
Aymeric.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to debhelper in Ubuntu.
https://bugs.launchpad.net/bugs/986892

Title:
  mysql-server postrm breaks apparmor profile for later versions on
  purge

Status in “apparmor” package in Ubuntu:
  Fix Released
Status in “debhelper” package in Ubuntu:
  Invalid
Status in “mysql-5.1” package in Ubuntu:
  Invalid
Status in “mysql-5.5” package in Ubuntu:
  Fix Released
Status in “mysql-dfsg-5.1” package in Ubuntu:
  Invalid
Status in “apparmor” source package in Lucid:
  Invalid
Status in “debhelper” source package in Lucid:
  Invalid
Status in “mysql-5.1” source package in Lucid:
  Invalid
Status in “mysql-5.5” source package in Lucid:
  Invalid
Status in “mysql-dfsg-5.1” source package in Lucid:
  In Progress
Status in “apparmor” source package in Oneiric:
  Invalid
Status in “debhelper” source package in Oneiric:
  In Progress
Status in “mysql-5.1” source package in Oneiric:
  Triaged
Status in “mysql-5.5” source package in Oneiric:
  Invalid
Status in “mysql-dfsg-5.1” source package in Oneiric:
  Invalid
Status in “apparmor” source package in Precise:
  Fix Committed
Status in “debhelper” source package in Precise:
  Invalid
Status in “mysql-5.1” source package in Precise:
  Invalid
Status in “mysql-5.5” source package in Precise:
  Fix Committed
Status in “mysql-dfsg-5.1” source package in Precise:
  Invalid

Bug description:
  MySQL 5.1 and 5.5 must be rebuilt with the updated debhelper/apparmor
  and so cannot be verified until those fixes are complete.

  Also for clarity sake, there has been a lot of shuffling of this bug
  around multiple packages for various reasons. This bug is fixed in
  quantal as part of the apparmor upload. All reverse deps should then
  be rebuilt for quantal. For SRU's, only known affected packages should
  be rebuilt, which thus far seems only to be mysql.

  [Test case]
  Apparmor:
  1.Install dh-apparmor
  2. Build a package which build-depends on it (such as mysql-5.5)
  3. Extract debs which have dh_apparmor run on them into a dir in tmp with dpkg -e file.deb /tmp/foo
  4. Verify that the postrm has conditional logic to not remove the files under /etc/apparmor.d/*/* if the main profile exists.

  Debhelper.
  Same test case as above, but with debhelper providing dh_apparmor

  MySQL 5.1 and MySQL 5.5 (oneiric, precise, lucid)
  1. install mysql-server
  2. check /var/lib/dpkg/info/mysql-server-5.1.postrm for conditional logic (change 5.1 to 5.5 for precise)
  3. for oneiric and lucid, upgrade to Ubuntu 12.04, verify that /etc/apparmor.d/local/usr.sbin.mysqld is still present.

  [Regression Potential]
  The logic is extremely straight forward, so regressions seem unlikely. Still, at worst, purging will leave behind some useless files in /etc/apparmor.d which should not be of much concern anyway.

  == Original bug description ==

  After upgrading from Kubuntu 11.10 to 12.04 beta I found that mysql
  isn't running after booting the system

  In the syslog there is the following row
  Apr 22 18:04:13 deathworld kernel: [   15.848658] init: mysql pre-start process (1033) terminated with status 1

  I've tried to execute /etc/init/mysql.conf step by step and found that execution
  /lib/init/apparmor-profile-load usr.sbin.mysqld
  shows the following error:
  AppArmor parser error for /etc/apparmor.d/usr.sbin.mysqld in /etc/apparmor.d/usr.sbin.mysqld at line 44: Could not open 'local/usr.sbin.mysqld'
  It's line:
  #include <local/usr.sbin.mysqld>

  After removing this line mysql can start without any problems

  Description:    Ubuntu 12.04 LTS
  Release:        12.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/986892/+subscriptions