Warning, /pim/akonadi/apparmor/postgresql_akonadi is written in an unsupported language. File is not indexed.
0001 abi <abi/3.0>,
0002
0003 #include <tunables/global>
0004
0005 @{xdg_data_home}=@{HOME}/.local/share
0006
0007 @{postgresqlpath} = /usr/ /usr/lib{,64}/postgresql/*/ /usr/lib{,64}/postgresql*[0-9]/ /opt/pgsql*/
0008
0009 profile postgresql_akonadi flags=(attach_disconnected) {
0010 #include <abstractions/base>
0011 #include <abstractions/bash>
0012 #include <abstractions/consoles>
0013 #include <abstractions/nameservice>
0014 #include <abstractions/user-tmp>
0015
0016 capability setgid,
0017 capability setuid,
0018
0019 signal receive set=kill peer=/usr/bin/akonadiserver,
0020 signal receive set=term peer=/usr/bin/akonadiserver,
0021
0022 deny / rw, # disconnected path
0023
0024 /etc/passwd r,
0025 /{usr/,}bin/{b,d}ash mrix,
0026 /{usr/,}bin/locale mrix,
0027 @{postgresqlpath}/bin/initdb mrix,
0028 @{postgresqlpath}/bin/pg_ctl mrix,
0029 @{postgresqlpath}/bin/postgres mrix,
0030 /usr/share/postgresql/** r,
0031 /usr/share/postgresql*[0-9]/timezonesets/Default r,
0032 owner /dev/shm/PostgreSQL.* rw,
0033 owner @{xdg_data_home}/akonadi/** rwlk,
0034 owner @{xdg_data_home}/akonadi/db_data/** l,
0035 owner /{,var/}run/user/@{uid}/akonadi** rwk,
0036
0037 # pg_upgrade
0038 @{postgresqlpath}/bin/pg_upgrade mrix,
0039 /opt/pgsql*/** mr,
0040 @{postgresqlpath}/bin/pg_controldata mrix,
0041 @{postgresqlpath}/bin/pg_resetwal mrix,
0042 @{postgresqlpath}/bin/pg_dumpall mrix,
0043 @{postgresqlpath}/bin/pg_dump mrix,
0044 @{postgresqlpath}/bin/vacuumdb mrix,
0045 @{postgresqlpath}/bin/psql mrix,
0046 @{postgresqlpath}/bin/pg_restore mrix,
0047 /{usr/,}bin/cp mrix,
0048 }