Mysql 5.7 mysql.pid Apparmor Denial
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
mysql-5.7 (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
On Ubuntu 16.04.6 LTS, after apt purge mysql-server* then apt install mysql-server the intallation fails because the AppArmor profile is incomplete. Booting with kernel command line parameter apparmor=0 allows successful install.
Running aa-logprof shows that the pid file is not in the profile based on the following output:
Profile: /usr/sbin/mysqld
Path: /run/mysqld/
Mode: rw
Severity: unknown
[1 - /run/mysqld/
[(A)llow] / (D)eny / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Abo(r)t / (F)inish / (M)ore
Adding /run/mysqld/
Debugging info:
cat /etc/issue
Ubuntu 16.04.6 LTS \n \l
---
apt-cache policy mysql-server*
mysql-server-5.0:
Installed: (none)
Candidate: (none)
Version table:
mysql-server-5.1:
Installed: (none)
Candidate: (none)
Version table:
mysql-server-5.5:
Installed: (none)
Candidate: (none)
Version table:
mysql-server-5.6:
Installed: (none)
Candidate: (none)
Version table:
mysql-server-5.7:
Installed: 5.7.25-
Candidate: 5.7.25-
Version table:
*** 5.7.25-
500 http://
500 http://
100 /var/lib/
5.
500 http://
mysql-server:
Installed: 5.7.25-
Candidate: 5.7.25-
Version table:
*** 5.7.25-
500 http://
500 http://
500 http://
500 http://
100 /var/lib/
5.
500 http://
500 http://
mysql-server-
Installed: (none)
Candidate: (none)
Version table:
mysql-server-
Installed: (none)
Candidate: (none)
Version table:
mysql-server-
Installed: (none)
Candidate: (none)
Version table:
mysql-server-
Installed: 5.7.25-
Candidate: 5.7.25-
Version table:
*** 5.7.25-
500 http://
500 http://
100 /var/lib/
5.
500 http://
** This system was upgraded from 14.04 using do-upgrade-release **
tags: | added: server-triage-discuss |
tags: | removed: server-triage-discuss |
In the package of http:// archive. ubuntu. com/ubuntu/ pool/main/ m/mysql- 5.7/mysql- 5.7_5.7. 25.orig. tar.gz
file deb-in/ extra/apparmor- profile
./packaging/
The following pids are listed but not mysql.pid
# Allow pid, socket, socket lock file access run/mysqld/ mysqld. pid rw, run/mysqld/ mysqld. sock rw, run/mysqld/ mysqld. sock.lock rw, mysqld/ mysqld. pid rw, mysqld/ mysqld. sock rw, mysqld/ mysqld. sock.lock rw,
/var/
/var/
/var/
/run/
/run/
/run/