[debian-mysql] Bug#875890: marked as pending in mariadb

[Otto Kekäläinen]

Control: tag -1 pending

Hello,

Bug #875890 in mariadb reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/mariadb-team/mariadb-server/-/commit/f43efd243a767c773ea44af47f95305ebb2346f8

------------------------------------------------------------------------
Add functional AppArmor profile for MariaDB 11.8 (Closes: #875890)

Replace the intentionally empty profile with a working one adapted from
MySQL 8.0 and 8.4 examples in Ubuntu, but with several additions and
modernization.

Key adaptations:
- Change profile name to /usr/sbin/mariadbd to match MariaDB's binary
- Keep /usr/sbin/mysqld rules for compatibility with legacy scripts
- Update local include path to local/mariadbd for site-specific overrides
- Use 'mariadb' in path names and plenty of wildcards to match common variations

Also update packaging:
- Add dh-apparmor to Build-Depends for proper debhelper integration
- Reload the AppArmor profile early in postinst before starting mariadbd
- Use dh_apparmor debhelper instead of manual profile installation

The early reload ensures the updated profile is active before the daemon
attempts to access new paths, preventing upgrade failures. The
dh_apparmor helper properly manages profile installation, updates, and
local overrides.

As the profile is new, it distributed now only in 'complain' mode until
there has been enough real usage and audit log reviews to have
confidence that it won't block legit usage.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/875890