[debian-mysql] Bug#736087: mysql-5.5: Please install AppArmor profile on Debian too

[intrigeri at debian.org]

Source: mysql-5.5
Severity: wishlist
Version: 5.5.33+dfsg-1

Hi,

debian/rules only installs the usr.sbin.mysqld AppArmor profile on
Ubuntu (no idea why this is done in override_dh_installlogrotate-arch,
by the way; looks like a buggy merge to me, but anyway, that's
off-topic for now).

Debian has been supporting AppArmor (disabled by default) since
Wheezy, so I see no reason to keep this delta. Please consider
installing this profile on regular Debian too. Note that a build-dep
on dh-apparmor will likely be needed to make this work.

If the MySQL maintainers don't think this is suitable for Debian, or
don't want to take care of it for some reason, then I'll include this
profile in the apparmor-profiles-extra package I am preparing. This is
the course of action I'm preferring for most profiles but those that
have been supported and well-maintained in Ubuntu for many years.
The MySQL profile falls into the latter category:
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/AppArmorProfiles
... so I would personally prefer to see it installed by the
mysql-5.5-server package itself.

Cheers,
--
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc