Warning message from apparmor about /usr/sbin/mysqld-akonadi

Bug #449358 reported by Laurent Bonnaud
This bug report is a duplicate of:  Bug #444479: missing apparmor access rule . Edit Remove
4
This bug affects 1 person
Affects Status Importance Assigned to Milestone
mysql-dfsg-5.1 (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: apparmor

I am using KDE4, which starts a /usr/sbin/mysqld-akonadi process. Each time I start a KDE4 session, apparmor complains with this message:

[ 107.926232] type=1503 audit(1255337141.339:68): operation="open" pid=3435 parent=3431 profile="/usr/sbin/mysqld-akonadi" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/sys/devices/system/cpu/"

ProblemType: Bug
ApparmorStatusOutput:
 Error: command /usr/sbin/apparmor_status failed with exit code 4: You do not have enough privilege to read the profile set.
 apparmor module is loaded.
Architecture: i386
Date: Mon Oct 12 11:06:55 2009
DistroRelease: Ubuntu 9.10
Package: apparmor 2.3.1+1403-0ubuntu25 [modified: sbin/apparmor_parser]
ProcVersionSignature: Ubuntu 2.6.31-13.44-generic-pae
SourcePackage: apparmor
Uname: Linux 2.6.31-13-generic-pae i686
XsessionErrors:
 (polkit-gnome-authentication-agent-1:3501): GLib-CRITICAL **: g_once_init_leave: assertion `initialization_value != 0' failed
 (gnome-settings-daemon:3528): GLib-CRITICAL **: g_propagate_error: assertion `src != NULL' failed

Revision history for this message
Laurent Bonnaud (laurent-bonnaud) wrote :
Revision history for this message
Laurent Bonnaud (laurent-bonnaud) wrote :

BTW, ubuntu-bug tried to run apparmor_status as a non-root user and failed. So here is the output of this command:

root@vougeot:~# apparmor_status
apparmor module is loaded.
33 profiles are loaded.
12 profiles are in enforce mode.
   /usr/share/gdm/guest-session/Xsession
   /usr/sbin/avahi-daemon
   /sbin/dhclient3
   /usr/sbin/mysqld-akonadi
   /usr/bin/evince-thumbnailer
   /usr/sbin/cupsd
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/connman/scripts/dhclient-script
   /usr/bin/evince-previewer
   /usr/sbin/tcpdump
   /usr/lib/cups/backend/cups-pdf
   /usr/bin/evince
21 profiles are in complain mode.
   /usr/lib/dovecot/imap-login
   /bin/ping
   /usr/sbin/ntpd
   /sbin/klogd
   /sbin/syslogd
   /sbin/syslog-ng
   /usr/lib/dovecot/imap
   /usr/sbin/traceroute
   /usr/sbin/mdnsd
   /usr/sbin/identd
   /usr/lib/dovecot/managesieve-login
   /usr/sbin/dnsmasq
   /usr/sbin/nmbd
   /usr/lib/dovecot/dovecot-auth
   /usr/lib/dovecot/pop3-login
   /usr/sbin/smbd
   /usr/lib/dovecot/deliver
   /usr/sbin/nscd
   /usr/lib/dovecot/pop3
   /usr/sbin/dovecot
   /usr/sbin/named
6 processes have profiles defined.
5 processes are in enforce mode :
   /usr/sbin/mysqld-akonadi (3435)
   /usr/sbin/avahi-daemon (1540)
   /usr/sbin/avahi-daemon (1539)
   /usr/sbin/cupsd (2800)
   /sbin/dhclient3 (1843)
1 processes are in complain mode.
   /usr/sbin/ntpd (3125)
0 processes are unconfined but have a profile defined.

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 449358, so it is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Feel free to continue to report any other bugs you may find.

affects: apparmor (Ubuntu) → mysql-dfsg-5.1 (Ubuntu)
Changed in mysql-dfsg-5.1 (Ubuntu):
status: New → Invalid
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Err... the dupe bug is bug 444479.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.