AppArmor complains about missing local/usr.sbin.mysqld file

Thanks for using Ubuntu and reporting a bug.

What version of apparmor do you have installed?
$ dpkg -l|grep apparmor

It is apparmor package 2.5.1~pre1393-0ubuntu4 (the current one in Maverick repository).

Can you attach your /var/log/apt/term.log?

Here is the term.log file, do you need an older one (term.log.*.gz) ?

Can you give the output of:
$ dpkg -l|grep mysql

Jamie: I'm able to reproduce this on Maverick. Here's the output you requested:

$ dpkg -l | grep mysql
ii libdbd-mysql-perl 4.016-1 Perl5 database interface to the MySQL database
ii libmysqlclient16 5.1.49-1ubuntu2 MySQL database client library
ii mysql-client-5.1 5.1.49-1ubuntu2 MySQL database client binaries
ii mysql-client-core-5.1 5.1.49-1ubuntu2 MySQL database core client binaries
ii mysql-common 5.1.49-1ubuntu2 MySQL database common files, e.g. /etc/mysql/my.cnf
ii mysql-server-5.1 5.1.49-1ubuntu2 MySQL database server binaries and system database setup
ii mysql-server-core-5.1 5.1.49-1ubuntu2 MySQL database server binaries
ii mysql-testsuite 5.1.49-1ubuntu2 MySQL testsuite

(It's the resulting set of packages that were installed by doing apt-get install mysql-server-5.1 mysql-testsuite.)

dpkg -l | grep mysql

ii libdbd-mysql-perl 4.016-1 Perl5 database interface to the MySQL database
ii libmysqlclient16 5.1.49-1ubuntu2 MySQL database client library
ii libqt4-sql-mysql 4:4.7.0~beta2-0ubuntu4 Qt 4 MySQL database driver
ii mysql-client 5.1.49-1ubuntu2 MySQL database client (metapackage depending on the latest version)
ii mysql-client-5.1 5.1.49-1ubuntu2 MySQL database client binaries
ii mysql-client-core-5.1 5.1.49-1ubuntu2 MySQL database core client binaries
ii mysql-common 5.1.49-1ubuntu2 MySQL database common files, e.g. /etc/mysql/my.cnf
ii mysql-server 5.1.49-1ubuntu2 MySQL database server (metapackage depending on the latest version)
ii mysql-server-5.1 5.1.49-1ubuntu2 MySQL database server binaries and system database setup
ii mysql-server-core-5.1 5.1.49-1ubuntu2 MySQL database server binaries
ii php5-mysql 5.3.3-1ubuntu3 MySQL module for php5

Thanks, I'll look into it.

Umm, surely this is the problem:

]$ dpkg -L apparmor | grep local
/etc/apparmor.d/local
/etc/apparmor.d/local/README

Ah, no, you've been pushing the generation of local/ files into the postinst packages with the profiles themselves. The issue is that mysql-server-5.1's postinst doesn't contain the dh_apparmor generated bits to create it.

(Can dh_apparmor be used here? The mysqld apparmor policy is reloaded as part of the mysqld upstart conf, I don't think we want it also reloaded directly during the postinst.)

I am going to guess that you guys have amd64 or at least non-i386. The amd64 postinst did not include the lastest debhelper bits to create the local/usr.sbin.mysqld file. This will be fixed in the next upload.

Yes, I use the amd64 variant of Kubuntu, as mentioned in bug report:

Uname: Linux 2.6.35-14-generic x86_64
Architecture: amd64

Thanks for taking care of this bug.

This bug was fixed in the package mysql-5.1 - 5.1.49-1ubuntu3

---------------
mysql-5.1 (5.1.49-1ubuntu3) maverick; urgency=low

  * debian/control: Build-Depends on debhelper 7.4.20ubuntu6, which has a
    fix that prevented debhelper from creating the necessary output in
    postinst (LP: #616417)
 -- Jamie Strandboge <email address hidden> Wed, 11 Aug 2010 15:08:12 -0500

This bug was fixed in the package mysql-5.1 - 5.1.49-1ubuntu4

---------------
mysql-5.1 (5.1.49-1ubuntu4) maverick; urgency=low

  * debian/rules: doy. Put dh_apparmor in binary-arch so more than just
    i386 has the benefit of AppArmor protection, really fixing LP: #616417
 -- Jamie Strandboge <email address hidden> Thu, 12 Aug 2010 07:11:57 -0500