mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

update mysqld profile

Browse source 
This updates the mysqld to what I use on my servers nowadays.

Note: my profile also has capability sys_resource,, but I'm not sure
why I had to add this and therefore didn't include it in this merge
request.

Speaking about "why I had added $whatever" - these changes were
collected over the last years and of course ;-) I don't remember any
details.

PR: https://gitlab.com/apparmor/apparmor/merge_requests/310
(cherry picked from commit 0199edf8e7)
Acked-by: Seth Arnold <seth.arnold@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
Christian Boltz 2019-01-24 00:30:34 +01:00 • committed by John Johansen
parent bc4a1afac1
commit 811625233f
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
profiles/apparmor/profiles/extras/usr.sbin.mysqld
View file

@ -3,7 +3,7 @@
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
# Copyright (C) 2014 Christian Boltz
# Copyright (C) 2014-2019 Christian Boltz
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
@ -30,13 +30,14 @@
/etc/my.cnf.d/ r,
/etc/my.cnf.d/*.cnf r,
/root/.my.cnf r,
/sys/devices/system/cpu/online r,
/usr/lib{,32,64}/**.so mr,
/usr/sbin/mysqld r,
/usr/sbin/mysqld mr,
/usr/share/mariadb/*/errmsg.sys r,
/usr/share/mysql-community-server/*/errmsg.sys r,
/usr/share/mysql/** r,
/var/lib/mysql/ r,
/var/lib/mysql/** rwl,
/var/lib/mysql/** rwlk,
/var/log/mysql/mysqld-upgrade-run.log w,
/var/log/mysql/mysqld.log w,
/var/log/mysql/mysqld.log-20* w,