Skip to content

Commit b8e378e

Browse files
committed
PS-9500: AppArmor denies access to files /proc/self/task/<tid>/mem
Access to /proc/$pid/task/$thread_id/mem is required by stacktrace code. We apply the same changes as upstream did at mysql/mysql-server@b76c48b031d
1 parent f64a63f commit b8e378e

File tree

3 files changed

+3
-0
lines changed

3 files changed

+3
-0
lines changed

build-ps/debian/extra/apparmor-profile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@
1212
/sys/devices/system/node/ r,
1313
/sys/devices/system/node/** r,
1414
/proc/*/status r,
15+
/proc/*/mem r,
1516
capability sys_resource,
1617
capability dac_override,
1718
capability setuid,

build-ps/debian/extra/apparmor.d/old_apparmor

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@
1212
/sys/devices/system/node/ r,
1313
/sys/devices/system/node/** r,
1414
/proc/*/status r,
15+
/proc/*/mem r,
1516
capability sys_resource,
1617
capability dac_override,
1718
capability setuid,

build-ps/debian/extra/apparmor.d/usr.sbin.mysqld.in2

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@
1212
/sys/devices/system/node/ r,
1313
/sys/devices/system/node/** r,
1414
/proc/*/status r,
15+
/proc/*/mem r,
1516
capability sys_resource,
1617
capability dac_override,
1718
capability setuid,

0 commit comments

Comments
 (0)