Re: [apparmor] AppArmor Digest, Vol 105, Issue 2

2019-02-15 Thread Seth Arnold
On Fri, Feb 15, 2019 at 03:11:08PM -0500, Espresso Beanies wrote:
> Thanks Seth. Well, I installed both the 'mysql-server' and mariadb-server'
> packages, but didn't see the usr.sbin.mysqld profile appear in Apparmor or
> anywhere on my system when I ran a 'locate' search.

Be very careful how you switch between mariadb and mysql. It's best to
*purge* the old packages when you want to try the other. Just "remove"ing
the packages will leave old config files around, and the mariadb packaging
throws away the apparmor profile entirely.

Thanks



signature.asc
Description: PGP signature
-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor


Re: [apparmor] AppArmor Digest, Vol 105, Issue 2

2019-02-15 Thread Espresso Beanies
Thanks Seth. Well, I installed both the 'mysql-server' and mariadb-server'
packages, but didn't see the usr.sbin.mysqld profile appear in Apparmor or
anywhere on my system when I ran a 'locate' search.

On Thu, Feb 14, 2019 at 7:00 AM  wrote:

> Send AppArmor mailing list submissions to
> apparmor@lists.ubuntu.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.ubuntu.com/mailman/listinfo/apparmor
> or, via email, send a message with subject or body 'help' to
> apparmor-requ...@lists.ubuntu.com
>
> You can reach the person managing the list at
> apparmor-ow...@lists.ubuntu.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of AppArmor digest..."
>
>
> Today's Topics:
>
>1.  Not seeing apparmor profile for SSHD service in Ubuntu   18.04
>   (Espresso Beanies)
>2. Re:  Not seeing apparmor profile for SSHD service in Ubuntu
>   18.04 (Seth Arnold)
>
>
> --
>
> Message: 1
> Date: Wed, 13 Feb 2019 10:48:23 -0500
> From: Espresso Beanies 
> To: apparmor@lists.ubuntu.com
> Subject: [apparmor] Not seeing apparmor profile for SSHD service in
> Ubuntu  18.04
> Message-ID:
>  owfnfdx9ez...@mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> I'm not seeing the Apparmor profile for the SSHD service in Ubuntu 18.04
> when I go to install Apparmor and all the profiles. Was it taken out from
> this release? I saw MySQL was also cut out from the 18.04 release as well.
> -- next part --
> An HTML attachment was scrubbed...
> URL: <
> https://lists.ubuntu.com/archives/apparmor/attachments/20190213/37ddb531/attachment-0001.html
> >
>
> --
>
> Message: 2
> Date: Wed, 13 Feb 2019 12:48:54 -0800
> From: Seth Arnold 
> To: apparmor@lists.ubuntu.com
> Subject: Re: [apparmor] Not seeing apparmor profile for SSHD service
> in Ubuntu 18.04
> Message-ID: <20190213204854.GA30528@hunt>
> Content-Type: text/plain; charset="utf-8"
>
> On Wed, Feb 13, 2019 at 10:48:23AM -0500, Espresso Beanies wrote:
> > I'm not seeing the Apparmor profile for the SSHD service in Ubuntu 18.04
> > when I go to install Apparmor and all the profiles. Was it taken out from
> > this release? I saw MySQL was also cut out from the 18.04 release as
> well.
>
> There hasn't been an opensshd profile for a long time: it would really
> only make sense as a change_hat- or change_profile-aware variant,
> since some sshd processes should have almost no privileges, and other
> sshd processes need to be able to start root-owned shells to support
> admin logins.
>
> We had one, but it probably hasn't been built in a very long time.
>
> mysql though is surprising. At least the mysql-5.7 package version
> 5.7.25-0ubuntu0.18.04.2 appears to have a profile. How did you install
> your mysql?
>
> Thanks
> -- next part --
> A non-text attachment was scrubbed...
> Name: signature.asc
> Type: application/pgp-signature
> Size: 488 bytes
> Desc: not available
> URL: <
> https://lists.ubuntu.com/archives/apparmor/attachments/20190213/cbecbd8a/attachment-0001.sig
> >
>
> --
>
> Subject: Digest Footer
>
> --
> AppArmor mailing list
> AppArmor@lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/apparmor
>
>
> --
>
> End of AppArmor Digest, Vol 105, Issue 2
> 
>
-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor