Comment 7 for bug 201799

On Sat, Apr 26, 2008 at 02:37:54AM -0000, Rick Bahague Jr wrote:
> I disabled app armor and now it is working.
>
> /etc/init.d/apparmor stop
> update-rc.d -f apparmor remove
>
> We should really fix this since many are using this application in
> Ubuntu.

No. Do not do this. Please disable the _profile_ for mysqld
if it is causing problems:

  sudo apt-get install apparmor
  sudo touch /etc/apparmor.d/disable/usr.sbin.mysqld
  sudo /etc/init.d/apparmor start
  sudo /etc/init.d/mysqld restart

or, just flip the profile into complain mode:

  sudo aa-complain mysqld

better yet, fix the profile:

  sudo vi /etc/apparmor.d/*mysqld
  sudo /etc/init.d/mysqld restart

Do not remove the entire subsystem. :P

--
Kees Cook
Ubuntu Security Team