[debian-mysql] Bug#1131915: mariadb-server: Apparmor blocks access to SSL key

Otto Kekäläinen otto at debian.org
Fri Apr 3 15:23:50 BST 2026


Hi,

Thanks for reporting!

Are you able to write these lines using wildcards so that the exact
same lines could be added to the global profile and benefit everyone?

/etc/letsencrypt/live/xxxx/privkey.pem    r,
/etc/letsencrypt/archive/xxx/**  r,

Maybe something like this?

/etc/letsencrypt/live/*/privkey.pem    r,
/etc/letsencrypt/archive/*/**  r,


Can you test if it works?


Potential fixes being worked on at
https://salsa.debian.org/mariadb-team/mariadb-server/-/merge_requests/159



More information about the pkg-mysql-maint mailing list