Public bug reported: Using strongswan-systemd (the recommended modern daemon), I can't use the sql and attr-sql plugins with a mysql backend as it trigger apparmor errors:
Apr 23 13:25:23 vpn-1 audit[2970]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/charon-systemd" name="/usr/share/mysql/charsets/Index.xml" pid=2970 comm="charon-systemd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 Apr 23 13:25:23 vpn-1 audit[2970]: AVC apparmor="ALLOWED" operation="connect" profile="/usr/sbin/charon-systemd" name="/run/mysqld/mysqld.sock" pid=2970 comm="charon-systemd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=110 ** Affects: strongswan (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1766240 Title: apparmor profile prevent mysql backend usage To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1766240/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs