akonadi/apparmor/usr.bin.akonadiserver

0001 abi <abi/3.0>,
0002
0003 #include <tunables/global>
0004
0005 @{xdg_data_home}=@{HOME}/.local/share
0006
0007 @{xdg_config_home}=@{HOME}/.config
0008
0009 @{postgresqlpath} = /usr/ /usr/lib{,64}/postgresql/*/ /usr/lib{,64}/postgresql*[0-9]/ /opt/pgsql*/
0010
0011 /usr/bin/akonadiserver {
0012   #include <abstractions/base>
0013   #include <abstractions/consoles>
0014   #include <abstractions/dbus-session-strict>
0015   #include <abstractions/nameservice>
0016   #include <abstractions/openssl>
0017   #include <abstractions/qt5>
0018   #include <abstractions/user-tmp>
0019
0020   signal send set=kill peer=mysqld_akonadi,
0021   signal send set=term peer=mysqld_akonadi,
0022   ptrace read peer=mysqld_akonadi,
0023
0024   signal send set=kill peer=mariadbd_akonadi,
0025   signal send set=term peer=mariadbd_akonadi,
0026   ptrace read peer=mariadbd_akonadi,
0027
0028   signal send set=kill peer=postgresql_akonadi,
0029   signal send set=term peer=postgresql_akonadi,
0030
0031   dbus (send)
0032       bus=session
0033       interface=org.freedesktop.DBus,
0034   dbus bind
0035       bus=session
0036       name=org.freedesktop.Akonadi,
0037   dbus (receive, send)
0038       bus=session
0039       interface=org.freedesktop.Akonadi**,
0040
0041   /etc/xdg/** r,
0042   /usr/bin/akonadiserver mr,
0043   /usr/lib/x86_64-linux-gnu/libexec/drkonqi PUx,
0044   /usr/lib{,64}/libexec/drkonqi PUx,
0045   /usr/libexec/drkonqi PUx,
0046   /usr/bin/mariadb-admin Px -> mariadbd_akonadi,
0047   /usr/bin/mariadb-check Px -> mariadbd_akonadi,
0048   /usr/bin/mariadb-install-db Px -> mariadbd_akonadi,
0049   /usr/bin/mariadb-upgrade Px -> mariadbd_akonadi,
0050   /usr/{,s}bin/mariadbd Px -> mariadbd_akonadi,
0051   /usr/bin/mysql_install_db Px -> mysqld_akonadi,
0052   /usr/bin/mysql_upgrade Px -> mysqld_akonadi,
0053   /usr/bin/mysqladmin Px -> mysqld_akonadi,
0054   /usr/bin/mysqlcheck Px -> mysqld_akonadi,
0055   /usr/{,s}bin/mysqld Px -> mysqld_akonadi,
0056   @{postgresqlpath}/bin/initdb Px -> postgresql_akonadi,
0057   @{postgresqlpath}/bin/pg_ctl Px -> postgresql_akonadi,
0058   @{postgresqlpath}/bin/pg_upgrade Px -> postgresql_akonadi,
0059   /usr/sbin/mysqld Px -> mysqld_akonadi,
0060   /usr/share/icu/[0-9]*.[0-9]*/*.dat r,
0061   /usr/{local/,}share/mime/mime.cache r,
0062   /usr/share/mime/packages/ r,
0063   /usr/{local/,}share/mime/types r,
0064   /usr/share/qt5/qtlogging.ini r,
0065   /usr/share/qt{,[5-6]}/translations/* r,
0066   /usr/share/mysql/** r,
0067   @{PROC}/sys/kernel/core_pattern r,
0068   @{PROC}/sys/kernel/random/boot_id r,
0069   owner @{xdg_config_home}/* r,
0070   owner @{xdg_config_home}/akonadi* rw,
0071   owner @{xdg_config_home}/QtProject/qtlogging.ini r,
0072   owner @{xdg_config_home}/akonadi/ rw,
0073   owner @{xdg_config_home}/akonadi/** rwl,
0074   owner @{xdg_config_home}/akonadi/akonadiconnectionrc wl,
0075   owner @{xdg_config_home}/akonadi/akonadiconnectionrc.lock rwk,
0076   owner @{xdg_config_home}/akonadi/akonadiserverrc.lock rwk,
0077   owner @{xdg_data_home}/mime/mime.cache r,
0078   owner @{xdg_data_home}/mime/packages/ r,
0079   owner @{xdg_data_home}/mime/types r,
0080   owner @{xdg_data_home}/akonadi/ rw,
0081   owner @{xdg_data_home}/akonadi/* rwlk,
0082   owner @{xdg_data_home}/akonadi/** rwk,
0083   owner @{PROC}/@{pid}/loginuid r,
0084   owner @{PROC}/@{pid}/mounts r,
0085   owner @{PROC}/[0-9]*/stat r,
0086   owner /{,var/}run/user/@{uid}/akonadi** rwk,
0087   owner /{,var/}run/user/@{uid}/kdeinit** rwk,
0088   owner /{,var/}run/user/@{uid}/kcrash** rwk,
0089   owner /tmp/#[0-9]* m,
0090 }