summaryrefslogtreecommitdiffstats
path: root/debian/apparmor-profile
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-04 18:04:23 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-04 18:04:23 +0000
commit9a6158e391576f265fbd7d0da2778ecad1dbecd5 (patch)
tree1409a92dae3e99541a9283fed1d0409adb033557 /debian/apparmor-profile
parentAdding upstream version 1:10.6.11. (diff)
downloadmariadb-10.6-9a6158e391576f265fbd7d0da2778ecad1dbecd5.tar.xz
mariadb-10.6-9a6158e391576f265fbd7d0da2778ecad1dbecd5.zip
Adding debian version 1:10.6.11-2.debian/1%10.6.11-2debian
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/apparmor-profile')
-rw-r--r--debian/apparmor-profile15
1 files changed, 15 insertions, 0 deletions
diff --git a/debian/apparmor-profile b/debian/apparmor-profile
new file mode 100644
index 00000000..b1f229b3
--- /dev/null
+++ b/debian/apparmor-profile
@@ -0,0 +1,15 @@
+# This file is intentionally empty to disable apparmor by default for newer
+# versions of MariaDB, while providing seamless upgrade from older versions
+# and from mysql, where apparmor is used.
+#
+# By default, we do not want to have any apparmor profile for the MariaDB
+# server. It does not provide much useful functionality/security, and causes
+# several problems for users who often are not even aware that apparmor
+# exists and runs on their system.
+#
+# Users can modify and maintain their own profile, and in this case it will
+# be used.
+#
+# When upgrading from previous version, users who modified the profile
+# will be prompted to keep or discard it, while for default installs
+# we will automatically disable the profile.