[apparmor] [PATCH] Convert aa-status to Python

Seth Arnold seth.arnold at gmail.com
Thu May 26 20:13:21 UTC 2011


On Thu, May 26, 2011 at 1:07 PM, Marc Deslauriers
<marc.deslauriers at canonical.com> wrote:
> Hmm..I'm not quite sure where this is used during boot. Is it in
> SUSE-specific init scripts?

Check out /etc/init/mysql.conf on an Ubuntu 10.10 system. Not sure if
this has survived to 11.04 or not, I like to let others test large
upgrades for me. :)

pre-start script
    #Sanity checks
    [ -r $HOME/my.cnf ]
    [ -d /var/run/mysqld ] || install -m 755 -o mysql -g root -d /var/run/mysqld
    # Load AppArmor profile
    if aa-status --enabled 2>/dev/null; then
        apparmor_parser -r /etc/apparmor.d/usr.sbin.mysqld || true
    fi
    LC_ALL=C BLOCKSIZE= df --portability /var/lib/mysql/. | tail -n 1
| awk '{ exit ($4<4096) }'
end script


>> C or sh would make me happier.
>
> For a tool used during boot, I would agree...but that doesn't seem to be
> the case here.

If aa-status has been yanked from boot setups, then a reimplementation
is pretty keen. :)

> In any case, I've just resubmitted it while moving the perl aa-status to
> the deprecated directory in case it is still required for some distros.

Thanks :)



More information about the AppArmor mailing list