mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-09 10:51:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d/abstractions/mysql

21 lines
739 B
Text
Raw Normal View History

Bug 167798 - misc profile modifications from darix -- mlmmj, lighttpd, oidentd profiles in extras/, new postfix helpers in complain mode (enabled), split apart nameservice a little (non destructively), add new abstractions for python, ruby, and php5, add web-data and svn-repositories data-centric abstractions
2006-05-02 00:25:47 +00:00
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2006 Novell/SUSE
abstractions/mysql: changed paths and MariaDB support abstractions/mysql contains /var/lib/mysql/mysql.sock rw, /usr/share/mysql/charsets/ r, /usr/share/mysql/charsets/*.xml r, but the files moved (at least on openSUSE) to /usr/share/mysql-community-server/charsets/*.xml /var/run/mysql/mysql.sock This causes denials for all applications using MySQL on 12.2 and Factory. MariaDB has the *.xml files in /usr/share/mariadb/charsets/*.xml and also seems to use /var/run/mysql/ for the socket. Since MariaDB is basically a drop-in replacement for MySQL, it makes sense to allow access to it via abstractions/mysql. References: https://bugzilla.novell.com/show_bug.cgi?id=798183 Acked-by: Seth Arnold <seth.arnold@canonical.com>
2013-01-13 14:38:28 +01:00
# Copyright (C) 2013 Christian Boltz
Bug 167798 - misc profile modifications from darix -- mlmmj, lighttpd, oidentd profiles in extras/, new postfix helpers in complain mode (enabled), split apart nameservice a little (non destructively), add new abstractions for python, ruby, and php5, add web-data and svn-repositories data-centric abstractions
2006-05-02 00:25:47 +00:00
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
2020-05-05 00:08:39 -07:00
abi <abi/3.0>,
abstractions/mysql: allow access to mysqld.sock From: Felix Geyer <debfx@ubuntu.com> Acked-by: Seth Arnold <seth.arnold@canonical.com>
2014-04-28 14:07:17 -07:00
/var/lib/mysql{,d}/mysql{,d}.sock rw,
Use "run" variable in profiles Signed-off-by: nl6720 <nl6720@gmail.com>
2020-02-13 11:02:49 +02:00
@{run}/mysql{,d}/mysql{,d}.sock rw,
abstractions/mysql: changed paths and MariaDB support abstractions/mysql contains /var/lib/mysql/mysql.sock rw, /usr/share/mysql/charsets/ r, /usr/share/mysql/charsets/*.xml r, but the files moved (at least on openSUSE) to /usr/share/mysql-community-server/charsets/*.xml /var/run/mysql/mysql.sock This causes denials for all applications using MySQL on 12.2 and Factory. MariaDB has the *.xml files in /usr/share/mariadb/charsets/*.xml and also seems to use /var/run/mysql/ for the socket. Since MariaDB is basically a drop-in replacement for MySQL, it makes sense to allow access to it via abstractions/mysql. References: https://bugzilla.novell.com/show_bug.cgi?id=798183 Acked-by: Seth Arnold <seth.arnold@canonical.com>
2013-01-13 14:38:28 +01:00
/usr/share/{mysql,mysql-community-server,mariadb}/charsets/ r,
/usr/share/{mysql,mysql-community-server,mariadb}/charsets/*.xml r,
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com>
2019-01-24 03:03:11 -08:00
# Include additions to the abstraction
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'.
2020-05-30 19:46:08 +02:00
include if exists <abstractions/mysql.d>
Reference in a new issue Copy permalink