/apparmor.d/usr.sbin.mysqld

 1# vim:syntax=apparmor
 2# Last Modified: Tue Jun 19 17:37:30 2007
 3#include <tunables/global>
 4
 5/usr/sbin/mysqld {
 6  #include <abstractions/base>
 7  #include <abstractions/nameservice>
 8  #include <abstractions/user-tmp>
 9  #include <abstractions/mysql>
10  #include <abstractions/winbind>
11
12  capability dac_override,
13  capability sys_resource,
14  capability setgid,
15  capability setuid,
16
17  network tcp,
18
19  /etc/hosts.allow r,
20  /etc/hosts.deny r,
21
22  /etc/mysql/*.pem r,
23  /etc/mysql/conf.d/ r,
24  /etc/mysql/conf.d/* r,
25  /etc/mysql/my.cnf r,
26  /usr/sbin/mysqld mr,
27  /usr/share/mysql/** r,
28  /var/log/mysql.log rw,
29  /var/log/mysql.err rw,
30  /var/lib/mysql/ r,
31  /var/lib/mysql/** rwk,
32  /var/log/mysql/ r,
33  /var/log/mysql/* rw,
34  /var/run/mysqld/mysqld.pid w,
35  /var/run/mysqld/mysqld.sock w,
36
37  /sys/devices/system/cpu/ r,
38}