| 2010-08-13 15:59:16 |
Steve Beattie |
bug |
|
|
added bug |
| 2010-08-13 22:10:10 |
Launchpad Janitor |
mysql-5.1 (Ubuntu): status |
New |
Fix Released |
|
| 2010-08-13 23:15:37 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/mysql-5.1 |
|
| 2012-09-21 10:58:31 |
Stefano Rivera |
nominated for series |
|
Ubuntu Lucid |
|
| 2012-09-21 10:58:31 |
Stefano Rivera |
bug task added |
|
mysql-5.1 (Ubuntu Lucid) |
|
| 2012-09-21 10:58:49 |
Stefano Rivera |
bug task added |
|
mysql-dfsg-5.1 (Ubuntu) |
|
| 2012-09-21 10:59:01 |
Stefano Rivera |
mysql-dfsg-5.1 (Ubuntu): status |
New |
Invalid |
|
| 2012-09-21 10:59:04 |
Stefano Rivera |
mysql-5.1 (Ubuntu Lucid): status |
New |
Invalid |
|
| 2012-09-21 10:59:11 |
Stefano Rivera |
mysql-dfsg-5.1 (Ubuntu Lucid): importance |
Undecided |
Low |
|
| 2012-09-21 11:17:16 |
Stefano Rivera |
description |
Attempting to run the mysql testsuite fails with the apparmor policy as shipped in maverick with the following rejection:
[72565.740926] type=1400 audit(1281713173.741:61): apparmor="DENIED" operation="file_mmap" parent=18416 profile="/usr/sbin/mysqld" name="/usr/lib/mysql/plugin/ha_innodb_plugin.so.0.0.0" pid=18417 comm="mysqld" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
The following needs to be added to the apparmor profile for mysqld:
/usr/lib/mysql/plugin/*.so* m,
This also may be an issue on lucid, though I haven't built a version of mysql there with the fix for bug 617461 to reproduce it. |
== SRU Stuff ==
=== Impact ===
The HA innodb plugin can't be used, as the apparmor rules don't allow access to the plugin directory.
=== Regression potential ===
Minimal. When this rule was added in maverick, it went through a few iterations:
5.1.49-1ubuntu5, 5.1.49-1ubuntu6, and 5.1.49-1ubuntu7.
But it hasn't been changed since, so we can assume it isn't too problematic.
=== Test Case ===
Install mysql-server. Stop it.
Add the following to a [mysqld] block in my.cnf:
ignore_builtin_innodb
plugin-load=innodb=ha_innodb_plugin.so;innodb_trx=ha_innodb_plugin.so;innodb_locks=ha_innodb_plugin.so;innodb_lock_waits=ha_innodb_plugin.so;innodb_cmp=ha_innodb_plugin.so;innodb_cmp_reset=ha_innodb_plugin.so;innodb_cmpmem=ha_innodb_plugin.so;innodb_cmpmem_reset=ha_innodb_plugin.so
Then mysql won't start, reporting that it can't load the innodb plugin.
If it starts, we've solved the problem.
== Original Report ==
Attempting to run the mysql testsuite fails with the apparmor policy as shipped in maverick with the following rejection:
[72565.740926] type=1400 audit(1281713173.741:61): apparmor="DENIED" operation="file_mmap" parent=18416 profile="/usr/sbin/mysqld" name="/usr/lib/mysql/plugin/ha_innodb_plugin.so.0.0.0" pid=18417 comm="mysqld" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
The following needs to be added to the apparmor profile for mysqld:
/usr/lib/mysql/plugin/*.so* m,
This also may be an issue on lucid, though I haven't built a version of mysql there with the fix for bug 617461 to reproduce it. |
|
| 2012-09-22 08:46:22 |
Stefano Rivera |
description |
== SRU Stuff ==
=== Impact ===
The HA innodb plugin can't be used, as the apparmor rules don't allow access to the plugin directory.
=== Regression potential ===
Minimal. When this rule was added in maverick, it went through a few iterations:
5.1.49-1ubuntu5, 5.1.49-1ubuntu6, and 5.1.49-1ubuntu7.
But it hasn't been changed since, so we can assume it isn't too problematic.
=== Test Case ===
Install mysql-server. Stop it.
Add the following to a [mysqld] block in my.cnf:
ignore_builtin_innodb
plugin-load=innodb=ha_innodb_plugin.so;innodb_trx=ha_innodb_plugin.so;innodb_locks=ha_innodb_plugin.so;innodb_lock_waits=ha_innodb_plugin.so;innodb_cmp=ha_innodb_plugin.so;innodb_cmp_reset=ha_innodb_plugin.so;innodb_cmpmem=ha_innodb_plugin.so;innodb_cmpmem_reset=ha_innodb_plugin.so
Then mysql won't start, reporting that it can't load the innodb plugin.
If it starts, we've solved the problem.
== Original Report ==
Attempting to run the mysql testsuite fails with the apparmor policy as shipped in maverick with the following rejection:
[72565.740926] type=1400 audit(1281713173.741:61): apparmor="DENIED" operation="file_mmap" parent=18416 profile="/usr/sbin/mysqld" name="/usr/lib/mysql/plugin/ha_innodb_plugin.so.0.0.0" pid=18417 comm="mysqld" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
The following needs to be added to the apparmor profile for mysqld:
/usr/lib/mysql/plugin/*.so* m,
This also may be an issue on lucid, though I haven't built a version of mysql there with the fix for bug 617461 to reproduce it. |
== SRU Stuff ==
=== Impact ===
The HA innodb plugin can't be used, as the apparmor rules don't allow access to the plugin directory.
=== Regression potential ===
Minimal. When this rule was added in maverick, it went through a few iterations:
5.1.49-1ubuntu5, 5.1.49-1ubuntu6, and 5.1.49-1ubuntu7.
But it hasn't been changed since, so we can assume it isn't too problematic.
=== Test Case ===
Install mysql-server. Stop it.
Add the following to a [mysqld] block in my.cnf:
default-storage-engine=InnoDB
ignore_builtin_innodb
plugin-load=innodb=ha_innodb_plugin.so;innodb_trx=ha_innodb_plugin.so;innodb_locks=ha_innodb_plugin.so;innodb_lock_waits=ha_innodb_plugin.so;innodb_cmp=ha_innodb_plugin.so;innodb_cmp_reset=ha_innodb_plugin.so;innodb_cmpmem=ha_innodb_plugin.so;innodb_cmpmem_reset=ha_innodb_plugin.so
Then mysql won't start, reporting in /var/log/mysql/error.log that it can't load the innodb plugin.
If it starts, we've solved the problem.
== Original Report ==
Attempting to run the mysql testsuite fails with the apparmor policy as shipped in maverick with the following rejection:
[72565.740926] type=1400 audit(1281713173.741:61): apparmor="DENIED" operation="file_mmap" parent=18416 profile="/usr/sbin/mysqld" name="/usr/lib/mysql/plugin/ha_innodb_plugin.so.0.0.0" pid=18417 comm="mysqld" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
The following needs to be added to the apparmor profile for mysqld:
/usr/lib/mysql/plugin/*.so* m,
This also may be an issue on lucid, though I haven't built a version of mysql there with the fix for bug 617461 to reproduce it. |
|
| 2012-09-22 08:53:04 |
Stefano Rivera |
attachment added |
|
mysql-dfsg-5.1_5.1.63-0ubuntu0.10.04.2.debdiff https://bugs.launchpad.net/ubuntu/+source/mysql-dfsg-5.1/+bug/617463/+attachment/3330710/+files/mysql-dfsg-5.1_5.1.63-0ubuntu0.10.04.2.debdiff |
|
| 2012-11-27 02:51:03 |
Adam Conrad |
mysql-dfsg-5.1 (Ubuntu Lucid): status |
New |
Fix Committed |
|
| 2012-11-27 02:51:06 |
Adam Conrad |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2012-11-27 02:51:11 |
Adam Conrad |
bug |
|
|
added subscriber SRU Verification |
| 2012-11-27 02:51:14 |
Adam Conrad |
tags |
|
verification-needed |
|
| 2012-11-27 03:19:40 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lucid-proposed/mysql-dfsg-5.1 |
|
| 2012-12-10 14:06:16 |
Marc Deslauriers |
tags |
verification-needed |
verification-done |
|
| 2012-12-10 14:13:34 |
Launchpad Janitor |
mysql-dfsg-5.1 (Ubuntu Lucid): status |
Fix Committed |
Fix Released |
|
| 2012-12-10 14:13:34 |
Launchpad Janitor |
cve linked |
|
2012-5611 |
|
