Comment 2 for bug 244406

Mathais:

I would like to appeal your decision on this on the basis that mysqld already applies the necessary restriction and that the apparmor restriction is redundant, plus it is not granular per user. MySQL defaults to having LOAD DATA INFILE off due to the Files Privilege being off.

<This is due to the apparmor profile for mysqld that disallows the mysqld
process to read files in /var/www.>

On 7.04 all I needed was to GRANT FILES PRIVILEGES to use LOAD DATA INFILE. As it is now, apparmor thwarts my user-level GRANTS.

<See https://wiki.ubuntu.com/DebuggingApparmor for more
information on this.>

Here is what I did and it seems to work:
gelmjw@voyager:~$ sudo aa-complain /usr/sbin/mysqld
[sudo] password for gelmjw:
Setting /usr/sbin/mysqld to complain mode.
gelmjw@voyager:~$ sudo /etc/init.d/apparmor reload
Reloading AppArmor profiles : done.
gelmjw@voyager:~$

Thanks for the link. However I believe this is a workaround. Of course, I could be totally ignorant on this, so if there is a link to help understand why the apparmor restriction is there, I would be happy to be informed.

Thank You;
John