[Bug 578922] Re: user-tmp abstraction can be used in combined attack

2010-05-12 Thread Jamie Strandboge
Thank you for using Ubuntu and reporting a bug. The initial title for this bug is misleading: Bypass AppArmor ruleset of MySQL allows for remote code execution. First, the MySQL profile does not allow MySQL to execute code in /tmp or other places and none of the profile's ruleset was bypassed. As

[Bug 578922] Re: user-tmp abstraction can be used in combined attack

2010-05-12 Thread Jamie Strandboge
Thank you for using Ubuntu and reporting a bug. The initial title for this bug is misleading: Bypass AppArmor ruleset of MySQL allows for remote code execution. First, the MySQL profile does not allow MySQL to execute code in /tmp or other places and none of the profile's ruleset was bypassed. As