aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-03-20 19:16:32 +0100
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-03-20 19:16:32 +0100
commit39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 (patch)
tree9221704f413398cfb5d5759083b1e7032566820e /straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd
parent6b59b75c3a294060dea66bdee16ffaf95ae92889 (diff)
downloadbin-39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2.tar.gz
bin-39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2.zip
feat: first fully successful run e2e on straper
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd')
-rw-r--r--straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd15
1 files changed, 15 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd b/straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd
new file mode 100644
index 0000000..b1f229b
--- /dev/null
+++ b/straper/db/public/apparmor/apparmor.d/usr.sbin.mariadbd
@@ -0,0 +1,15 @@
+# This file is intentionally empty to disable apparmor by default for newer
+# versions of MariaDB, while providing seamless upgrade from older versions
+# and from mysql, where apparmor is used.
+#
+# By default, we do not want to have any apparmor profile for the MariaDB
+# server. It does not provide much useful functionality/security, and causes
+# several problems for users who often are not even aware that apparmor
+# exists and runs on their system.
+#
+# Users can modify and maintain their own profile, and in this case it will
+# be used.
+#
+# When upgrading from previous version, users who modified the profile
+# will be prompted to keep or discard it, while for default installs
+# we will automatically disable the profile.