[Bug 810270] Re: AppArmor profiles need updates for /var/run → /run and /var/lock → /run/lock and /dev/shm → /run/shm

[Jürgen]

I'm affraid it's not fixed yet for mysql Ver 14.14 Distrib 5.1.58, for debian-linux-gnu (x86_64).  http://penguindroppings.wordpress.com/2009/07/07/should-i-disable-apparmor/ was my help to temporary disable the profile for mysql to get things working again:
sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld 
sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/usr.sbin.mysqld
sudo service mysql start
mysql start/running, process 3024


Before doing this, I got this from dmesg:
type=1400 audit(1319135491.751:5641): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/mysqld" pid=2704 comm="apparmor_parser"
[84848.322283] type=1400 audit(1319135491.915:5642): apparmor="DENIED" operation="mknod" parent=1 profile="/usr/sbin/mysqld" name="/run/mysqld/mysqld.sock" pid=2708 comm="mysqld" requested_mask="c" denied_mask="c" fsuid=116 ouid=116
[84853.637467] init: mysql main process (2708) terminated with status 1
[84853.637505] init: mysql main process ended, respawning

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to isc-dhcp in Ubuntu.
https://bugs.launchpad.net/bugs/810270

Title:
  AppArmor profiles need updates for /var/run → /run and /var/lock →
  /run/lock and /dev/shm → /run/shm

Status in “apparmor” package in Ubuntu:
  Fix Released
Status in “bind9” package in Ubuntu:
  Fix Released
Status in “clamav” package in Ubuntu:
  Fix Released
Status in “cups” package in Ubuntu:
  Fix Released
Status in “gdm-guest-session” package in Ubuntu:
  Fix Released
Status in “isc-dhcp” package in Ubuntu:
  Fix Released
Status in “libvirt” package in Ubuntu:
  Fix Released
Status in “mysql-5.1” package in Ubuntu:
  Fix Released
Status in “ntp” package in Ubuntu:
  Fix Released
Status in “openldap” package in Ubuntu:
  Fix Released
Status in “apparmor” source package in Oneiric:
  Fix Released
Status in “bind9” source package in Oneiric:
  Fix Released
Status in “clamav” source package in Oneiric:
  Fix Released
Status in “cups” source package in Oneiric:
  Fix Released
Status in “gdm-guest-session” source package in Oneiric:
  Fix Released
Status in “isc-dhcp” source package in Oneiric:
  Fix Released
Status in “libvirt” source package in Oneiric:
  Fix Released
Status in “mysql-5.1” source package in Oneiric:
  Fix Released
Status in “ntp” source package in Oneiric:
  Fix Released
Status in “openldap” source package in Oneiric:
  Fix Released

Bug description:
  Figured I'd file a tracking bug for this.  The symlink exists from
  /var/run to /run, but I'm guessing the profiles don't like this.  The
  main problems I've seen so far are cups and dhclient (which I think
  are both profiles in their respective packages).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/810270/+subscriptions