[debian-mysql] Bug#921868: mariadb-server-10.3: mariadb ships invalid AppArmor profile

[Vincas Dargis]

Package: mariadb-server-10.3
Version: 1:10.3.12-2
Severity: minor
User: pkg-apparmor-team at lists.alioth.debian.org
Usertags: buggy-profile

Dear Maintainer,

Running some AppArmor utilities results in this error:

```
sudo aa-enforce /etc/apparmor.d/*
< lot's of output >
Setting /etc/apparmor.d/usr.sbin.mysqld to enforce mode.

ERROR: /etc/apparmor.d/usr.sbin.mysqld doesn't contain a valid profile (syntax error?)
```

/etc/apparmor.d/usr.sbin.mysqld file does not have "profile" declaration inside.

I do not know what would be the "best practice" in this case, bug consider
shipping additional lines at the end of file:

profile mariadb_profile_is_disabled_on_debian {
} 

or

profile mariadb_debian_dummy {
} 

or something similar.

At least it would be an *actually* empty named profile, instead of invalid
(unparasble) file.

Marked this bug as "minor" because it does not seem to trigger any bigger
issues, or at least not discovered yet.


-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-2-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mariadb-server-10.3 depends on:
ii  adduser                   3.118
ii  debconf [debconf-2.0]     1.5.70
ii  galera-3                  25.3.25-1
ii  gawk                      1:4.2.1+dfsg-1
ii  iproute2                  4.20.0-2
ii  libc6                     2.28-6
ii  libdbi-perl               1.642-1+b1
ii  libpam0g                  1.1.8-4
ii  libssl1.1                 1.1.1a-1
ii  libstdc++6                8.2.0-19
ii  lsb-base                  10.2018112800
ii  lsof                      4.91+dfsg-1
ii  mariadb-client-10.3       1:10.3.12-2
ii  mariadb-common            1:10.3.12-2
ii  mariadb-server-core-10.3  1:10.3.12-2
ii  passwd                    1:4.5-1.1
ii  perl                      5.28.1-4
ii  psmisc                    23.2-1
ii  rsync                     3.1.3-5
ii  socat                     1.7.3.2-2
ii  zlib1g                    1:1.2.11.dfsg-1

Versions of packages mariadb-server-10.3 recommends:
ii  libhtml-template-perl  2.97-1

Versions of packages mariadb-server-10.3 suggests:
ii  bsd-mailx [mailx]  8.1.2-0.20180807cvs-1
ii  mailutils [mailx]  1:3.5-2
pn  mariadb-test       <none>
pn  netcat-openbsd     <none>
pn  tinyca             <none>

-- debconf information excluded