[debian-mysql] Bug#875890: Please consider shipping /etc/apparmor.d/usr.sbin.mysqld from upstream

[Guido Günther]

Package: mariadb-server
Version: 10.1.26-1
Severity: wishlist

Hi,
it would be great if the package would ship upstream's profile (even if
only in complain mode like upstream does). This would help to iron out
the issues in the profile.

The current file file that starts like:

    # This file is intensionally empty to disable apparmor by default for newer
    # versions of MariaDB, while providing seamless upgrade from older versions
    # and from mysql, where apparmor is used.

    # By default, we do not want to have any apparmor profile for the MariaDB
    # server. It does not provide much useful functionality/security, and causes
    # several problems for users who often are not even aware that apparmor
    # exists and runs on their system.

is a bit discouraging.

Cheers,
 -- Guido

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'stable-updates'), (500, 'oldoldstable'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mariadb-server depends on:
pn  mariadb-server-10.1  <none>
pn  mariadb-server-10.3  <none>

mariadb-server recommends no packages.

mariadb-server suggests no packages.