cqrlog modifies MySQL apparmor profile in postinst
Hi,
I've noticed that cqrlog's postinst script runs cqrlog-apparmor-fix [1],
which modifies /etc/apparmor.d/usr.sbin.mysqld. The change is simple, it's
just adding one line to the end of the file:
@{HOME}/.config/cqrlog/database/** rwk,
The file is a config file in the mysql-server-5.5 package, so dpkg will
ask the user what to do when that package is upgraded and contains a new
version of the file. This leaves it to the user to resolve a conflict
introduced by package maintainers. It's not a very critical bug, but it's
a bit annoying.
Can we find a more elegant solution to this? There's an #include directive
at the bottom of the apparmor file (commented out, but we could enable
it). Perhaps cqrlog could put it's rule there, but I guess it's bad
practice for packages to put anything in /etc/apparmor.d/local. Any other
suggestions?
Regards / 73
Norvald H. Ryeng / LA6YKA
[1]
https://sources.debian.net/src/cqrlog/1.8.2-1.1/tools/cqrlog-apparmor-fix/
Reply to: