Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-2570

LP:491349 - MariaDB 5.1 apparmor profile incompatible with mysql-test-run.pl

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:

      Description

      The apparmor profile shipped in MariaDB 5.1.39 ubuntu debs prevents mysql-test-run.pl from working (the reason is that /usr/sbin/mysqld needs write permissions to the --vardir directory given by the user to mysql-test-run.pl).

      Since I believe apparmor is enabled by default in recent Ubuntu's, this means mysql-test-run.pl fails out-of-the-box on such systems.

      I don't think apparmor functionality is critical for MariaDB at this stage. Options for fixes (all ok with me):

      1. Move the MariaDB apparmor profile to /usr/share/doc/mariadb-server with comments about the issue (so it is only enabled if users do so explicitly).

      2. Document the issue that apparmor needs to be uninstalled/disabled to run the test suite (it is in any case not trivial to run the test suite due to need to pass writable --vardir to mysql-test-run.pl, /usr/share/mysql/mysql-test is usually not writable).

      3. Fix the apparmor profile to not restrict /usr/sbin/mysqld from writing files anywhere normal permissions allow.

        Gliffy Diagrams

          Attachments

            Activity

            Hide
            knielsen Kristian Nielsen added a comment -

            Re: MariaDB 5.1 apparmor profile incompatible with mysql-test-run.pl
            We removed the default apparmor profile from mariadb packages due to this and multiple other issues for users.

            Users can still maintain their own profile for mariadb, and adjust it to allow running mysql-test-run as they want/need.

            Show
            knielsen Kristian Nielsen added a comment - Re: MariaDB 5.1 apparmor profile incompatible with mysql-test-run.pl We removed the default apparmor profile from mariadb packages due to this and multiple other issues for users. Users can still maintain their own profile for mariadb, and adjust it to allow running mysql-test-run as they want/need.
            Hide
            ratzpo Rasmus Johansson added a comment -

            Launchpad bug id: 491349

            Show
            ratzpo Rasmus Johansson added a comment - Launchpad bug id: 491349

              People

              • Assignee:
                Unassigned
                Reporter:
                knielsen Kristian Nielsen
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: