[Bug 1873087] [NEW] AppArmor configuration for Akonadi's mysql is broken

[Lukáš Karas]

Public bug reported:

In akonadi-backend-mysql 19.12.3-0ubuntu2 (Focal) is AppArmor
configuration file /etc/apparmor.d/mysqld_akonadi that holds
"mysqld_akonadi" profile. After upgrade Akonadi to this version, it
fails during startup, with mysql server error:

mysqld: [ERROR] Failed to open required defaults file:
/home/karry/.local/share/akonadi/mysql.conf

in kernel log (dmesg) is apparmor message:

[16787.303724] audit: type=1400 audit(1586984985.384:353):
apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld"
name="/home/karry/.local/share/akonadi/mysql.conf" pid=24305 comm
="mysqld-akonadi" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000

Profile "/usr/sbin/mysqld" is placed in file
"/etc/apparmor.d/usr.sbin.mysqld" from package mysql-
server-8.0_8.0.19-0ubuntu4.

It seems to me that akonadi profile should contains real path to mysqld
executable (/usr/sbin/mysqld-akonadi is just symlink to mysqld)

After simple patch, Akonadi works fine:

sudo sed 's|mysqld_akonadi|/usr/sbin/mysqld|' -i /etc/apparmor.d/mysqld_akonadi
sudo systemctl reload apparmor
akonadictl start

** Affects: akonadi (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to akonadi in Ubuntu.
https://bugs.launchpad.net/bugs/1873087

Title:
  AppArmor configuration for Akonadi's mysql is broken

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/akonadi/+bug/1873087/+subscriptions