Basak. You were wrong at the beginning and your still wrong. The bug is
mysql and apparmor dont work together. Period. I havent had any problems at
all no matter what configuration i had as soon as I uninstalled mysql and
loaded another database. Please quit telling people there is nothing wrong
with mysql.

On Feb 9, 2018 9:05 AM, "Zach Appelbaum" <email address hidden> wrote:

> Where should we post it then? AppArmor bug tracker? It's pretty annoying
> to change 1 setting on mysql.cnf and then be denied restarting the MySQL
> server because of that. Are my distro settings too tight? is it
> apparmor? is it mysql?
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1610765
>
> Title:
>   Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it
>   to fail to start
>
> Status in mysql-5.7 package in Ubuntu:
>   Invalid
>
> Bug description:
>   [Triage Notes]
>
>   This bug tracks reports of the following AppArmor denial:
>
>   Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400
>   audit(1470619337.926:98): apparmor="DENIED" operation="open"
>   profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219
>   comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
>
>   If you are seeing a denial of /etc/mysql/my.cnf.migrated in this
>   manner, then the underlying issue may affect you too.
>
>   If you are seeing a denial of some other file, then you have some
>   other AppArmor-related problem that is *not* the issue tracked in this
>   bug. If you believe that your failure is a bug in Ubuntu, please look
>   for other bugs and file a new bug if there isn't a matching one that
>   tracks your different issue.
>
>   [Original Desription]
>
>   SYMPTOM
>   mysql fails to start
>
>   IMPACT
>   no sql for you
>
>   DIAGNOSE:
>   service mysql start
>   Job for mysql.service failed because the control process exited with
> error code. See "systemctl status mysql.service" and "journalctl -xe" for
> details.
>
>   - systemd has all sort of craziness going on so stop that
>   service mysql stop
>
>   - look at what apparmor is up to
>   tail -F /var/log/syslog | grep -i apparmor
>
>   - then start again
>   service mysql start
>
>   output is:
>   - mysql cannot read /etc/mysql
>   Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400
> audit(1470619337.926:98): apparmor="DENIED" operation="open"
> profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219
> comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
>
>   GET_AROUND:
>   sudo nano /etc/apparmor.d/usr.sbin.mysqld
>   line 25 after:
>   # Allow config access
>     /etc/mysql/** r,
>   -add line:
>     /etc/mysql/* r,
>
>   systemctl restart apparmor.service
>
>   service mysql stop
>   service mysql start
>
>   - problem is gone
>
>   ProblemType: Bug
>   DistroRelease: Ubuntu 16.04
>   Package: mysql-server-5.7 5.7.13-0ubuntu0.16.04.2
>   ProcVersionSignature: Ubuntu 4.4.0-31.50-generic 4.4.13
>   Uname: Linux 4.4.0-31-generic x86_64
>   ApportVersion: 2.20.1-0ubuntu2.1
>   Architecture: amd64
>   Date: Sun Aug  7 18:31:32 2016
>   Logs.var.log.daemon.log:
>
>   MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql]
>   MySQLConf.etc.mysql.conf.d.mysqld_safe_syslog.cnf:
>    [mysqld_safe]
>    syslog
>   MySQLConf.etc.mysql.conf.d.mysqldump.cnf:
>    [mysqldump]
>    quick
>    quote-names
>    max_allowed_packet   = 16M
>   MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf:
>    [mysqld_safe]
>    syslog
>   MySQLVarLibDirListing: ['debian-5.0.flag', 'ib_buffer_pool', 'test',
> 'ib_logfile1', 'xpc21.err', 'auto.cnf', 'mysql_upgrade_info', 'bugzilla',
> 'zabbix', 'debian-5.5.flag', 'debian-5.1.flag', 'redmine_default',
> 'roundcube', 'ib_logfile0', 'ibtmp1', 'sys', 'mysql', 'ibdata1', 'bugs',
> 'debian-5.7.flag', 'owncloud', 'performance_schema']
>   ProcEnviron:
>    SHELL=/bin/bash
>    TERM=xterm
>    PATH=(custom, user)
>    LANG=en_US.UTF-8
>    LANGUAGE=en_US.UTF-8
>   SourcePackage: mysql-5.7
>   UpgradeStatus: Upgraded to xenial on 2016-06-13 (56 days ago)
>   modified.conffile..etc.apparmor.d.usr.sbin.mysqld: [modified]
>   mtime.conffile..etc.apparmor.d.usr.sbin.mysqld:
> 2016-08-07T18:24:24.264357
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/
> 1610765/+subscriptions
>