Index: apparmor/postgresql_akonadi =================================================================== --- apparmor/postgresql_akonadi +++ apparmor/postgresql_akonadi @@ -4,19 +4,35 @@ profile postgresql_akonadi { #include + #include + #include + #include #include capability setgid, capability setuid, /etc/passwd r, - /{usr/,}bin/dash mrix, + /{usr/,}bin/{b,d}ash mrix, /{usr/,}bin/locale mrix, - /usr/lib/postgresql/*/bin/initdb mrix, - /usr/lib/postgresql/*/bin/pg_ctl mrix, - /usr/lib/postgresql/*/bin/postgres mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/initdb mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_ctl mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/postgres mrix, /usr/share/postgresql/** r, owner /dev/shm/PostgreSQL.* rw, owner @{xdg_data_home}/akonadi/** rwlk, owner @{xdg_data_home}/akonadi/db_data/** l, + owner /{,var/}run/user/@{uid}/akonadi** rwk, + + # pg_upgrade + /{usr/,usr/lib/postgresql/*/}bin/pg_upgrade mrix, + /opt/pgsql*/** mr, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_controldata mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_resetwal mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_dumpall mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_dump mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/vacuumdb mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/psql mrix, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_restore mrix, + /{usr/,}bin/cp mrix, } Index: apparmor/usr.bin.akonadiserver =================================================================== --- apparmor/usr.bin.akonadiserver +++ apparmor/usr.bin.akonadiserver @@ -6,6 +6,7 @@ /usr/bin/akonadiserver { #include + #include #include #include #include @@ -19,12 +20,14 @@ /usr/bin/mysql_install_db PUx -> mysqld_akonadi, /usr/bin/mysqladmin PUx -> mysqld_akonadi, /usr/bin/mysqlcheck PUx -> mysqld_akonadi, - /usr/lib/postgresql/*/bin/initdb PUx -> postgresql_akonadi, - /usr/lib/postgresql/*/bin/pg_ctl PUx -> postgresql_akonadi, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/initdb PUx -> postgresql_akonadi, + /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_ctl PUx -> postgresql_akonadi, + /{usr/,usr/lib/postgresql/*/}bin/pg_upgrade PUx -> postgresql_akonadi, /usr/sbin/mysqld PUx -> mysqld_akonadi, /usr/share/mime/mime.cache r, /usr/share/mime/packages/ r, /usr/share/mime/types r, + /usr/share/qt/translations/* r, @{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/random/boot_id r, owner @{xdg_config_home}/* r, @@ -43,4 +46,6 @@ owner @{xdg_data_home}/akonadi/** rwk, owner @{PROC}/@{pid}/loginuid r, owner @{PROC}/@{pid}/mounts r, + owner /{,var/}run/user/@{uid}/akonadi** rwk, + owner /tmp/#[0-9]* m, }