Ubuntu
mysql-5.1 package

Error in AppArmor rule for mysqld

Bug #622010 reported by Scott Testerman on 2010-08-21

8

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	mysql-5.1 (Ubuntu)	Fix Released	High	Jamie Strandboge

Bug Description

Binary package hint: apparmor

When running "dpkg-reconfigure mysql-server-5.1" the restart time is much longer than normal and the following error message is presented:
"AppArmor parser error for /etc/apparmor.d/usr.sbin.mysqld in /etc/apparmor.d/usr.sbin.mysqld at line 45: syntax error, unexpected TOK_CLOSE, expecting TOK_END_OF_RULE"

Restart does eventually complete and mysqld seems to be running correctly.

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: apparmor 2.5.1~pre1393-0ubuntu5
ProcVersionSignature: Ubuntu 2.6.35-17.23-generic 2.6.35.2
Uname: Linux 2.6.35-17-generic i686
ApparmorStatusOutput:
Error: command /usr/sbin/apparmor_status failed with exit code 4: You do not have enough privilege to read the profile set.
apparmor module is loaded.
Architecture: i386
Date: Sat Aug 21 18:45:52 2010
InstallationMedia: Kubuntu 10.10 "Maverick Meerkat" - Alpha i386 (20100701)
ProcEnviron:
LANGUAGE=
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: apparmor

Tags:

Related branches

lp:ubuntu/maverick/mysql-5.1

Revision history for this message

Scott Testerman (scott-testerman) wrote on 2010-08-21:

#1

ApparmorPackages.txt Edit (317 bytes, text/plain; charset="utf-8")
Dependencies.txt Edit (1.8 KiB, text/plain; charset="utf-8")
KernLog.txt Edit (168.9 KiB, text/plain; charset="utf-8")
PstreeP.txt Edit (19.5 KiB, text/plain; charset="utf-8")

Revision history for this message

Scott Testerman (scott-testerman) wrote on 2010-08-21:

#2

apparmor_status.txt Edit (603 bytes, text/plain)

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2010-08-22:

#3

Thanks for using Ubuntu and reporting a bug. Can you please attach your /etc/apparmor.d/usr.sbin.mysqld file?

affects:	apparmor (Ubuntu) → mysql-5.1 (Ubuntu)
Changed in mysql-5.1 (Ubuntu):
assignee:	nobody → Jamie Strandboge (jdstrand)
status:	New → Incomplete

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2010-08-22:

#4

Nevermind, 5.1.49-1ubuntu6 has a syntax error in the profile as seen in http://launchpadlibrarian.net/54065854/mysql-5.1_5.1.49-1ubuntu5_5.1.49-1ubuntu6.diff.gz. I'll fix and upload.

Changed in mysql-5.1 (Ubuntu):
status:	Incomplete → Triaged

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2010-08-22:

#5

For people updating AppArmor profiles, you can test the syntax of an apparmor profile by doing something like:

$ apparmor_parser -S ./debian/apparmor-profile >/dev/null

If it comes back without error, the syntax is ok (though in the case of usr.sbin.mysqld, if you don't have mysql-server-5.1 installed, you will need to do 'sudo touch /etc/apparmor.d/local/usr.sbin.mysqld' since the profile includes that file).

Changed in mysql-5.1 (Ubuntu):
status:	Triaged → Fix Committed
importance:	Undecided → High

Revision history for this message

Launchpad Janitor (janitor) wrote on 2010-08-22:

#6

This bug was fixed in the package mysql-5.1 - 5.1.49-1ubuntu7

---------------
mysql-5.1 (5.1.49-1ubuntu7) maverick; urgency=low

* debian/apparmor-profile: fix syntax error introduced in last upload
and remove added redundant access rule. LP: #622010, LP: #594932
-- Jamie Strandboge <email address hidden> Sat, 21 Aug 2010 22:16:40 -0500

Changed in mysql-5.1 (Ubuntu):
status:	Fix Committed → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.