apparmor/profiles/apparmor.d/abstractions/mysql

# ------------------------------------------------------------------
#
#    Copyright (C) 2002-2006 Novell/SUSE
#    Copyright (C) 2013 Christian Boltz
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

   /var/lib/mysql{,d}/mysql{,d}.sock rw,
   /{var/,}run/mysql{,d}/mysql{,d}.sock rw,
   /usr/share/{mysql,mysql-community-server,mariadb}/charsets/ r,
   /usr/share/{mysql,mysql-community-server,mariadb}/charsets/*.xml r,
Bug 167798 - misc profile modifications from darix -- mlmmj, lighttpd, oidentd profiles in extras/, new postfix helpers in complain mode (enabled), split apart nameservice a little (non destructively), add new abstractions for python, ruby, and php5, add web-data and svn-repositories data-centric abstractions 2006-05-02 00:25:47 +00:00			`# ------------------------------------------------------------------`
			`#`
			`# Copyright (C) 2002-2006 Novell/SUSE`
abstractions/mysql: changed paths and MariaDB support abstractions/mysql contains /var/lib/mysql/mysql.sock rw, /usr/share/mysql/charsets/ r, /usr/share/mysql/charsets/.xml r, but the files moved (at least on openSUSE) to /usr/share/mysql-community-server/charsets/.xml /var/run/mysql/mysql.sock This causes denials for all applications using MySQL on 12.2 and Factory. MariaDB has the .xml files in /usr/share/mariadb/charsets/.xml and also seems to use /var/run/mysql/ for the socket. Since MariaDB is basically a drop-in replacement for MySQL, it makes sense to allow access to it via abstractions/mysql. References: https://bugzilla.novell.com/show_bug.cgi?id=798183 Acked-by: Seth Arnold <seth.arnold@canonical.com> 2013-01-13 14:38:28 +01:00			`# Copyright (C) 2013 Christian Boltz`
Bug 167798 - misc profile modifications from darix -- mlmmj, lighttpd, oidentd profiles in extras/, new postfix helpers in complain mode (enabled), split apart nameservice a little (non destructively), add new abstractions for python, ruby, and php5, add web-data and svn-repositories data-centric abstractions 2006-05-02 00:25:47 +00:00			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`

abstractions/mysql: allow access to mysqld.sock From: Felix Geyer <debfx@ubuntu.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 2014-04-28 14:07:17 -07:00			`/var/lib/mysql{,d}/mysql{,d}.sock rw,`
			`/{var/,}run/mysql{,d}/mysql{,d}.sock rw,`
abstractions/mysql: changed paths and MariaDB support abstractions/mysql contains /var/lib/mysql/mysql.sock rw, /usr/share/mysql/charsets/ r, /usr/share/mysql/charsets/.xml r, but the files moved (at least on openSUSE) to /usr/share/mysql-community-server/charsets/.xml /var/run/mysql/mysql.sock This causes denials for all applications using MySQL on 12.2 and Factory. MariaDB has the .xml files in /usr/share/mariadb/charsets/.xml and also seems to use /var/run/mysql/ for the socket. Since MariaDB is basically a drop-in replacement for MySQL, it makes sense to allow access to it via abstractions/mysql. References: https://bugzilla.novell.com/show_bug.cgi?id=798183 Acked-by: Seth Arnold <seth.arnold@canonical.com> 2013-01-13 14:38:28 +01:00			`/usr/share/{mysql,mysql-community-server,mariadb}/charsets/ r,`
			`/usr/share/{mysql,mysql-community-server,mariadb}/charsets/*.xml r,`