diff --git a/apparmor/usr.bin.akonadiserver b/apparmor/usr.bin.akonadiserver index 697d31519..862fbf0fb 100644 --- a/apparmor/usr.bin.akonadiserver +++ b/apparmor/usr.bin.akonadiserver @@ -1,53 +1,68 @@ #include @{xdg_data_home}=@{HOME}/.local/share @{xdg_config_home}=@{HOME}/.config /usr/bin/akonadiserver { #include #include #include #include #include #include #include signal send set=kill peer=mysqld_akonadi, signal send set=term peer=mysqld_akonadi, + dbus (send) + bus=session + interface=org.freedesktop.DBus, + dbus bind + bus=session + name=org.freedesktop.Akonadi, + dbus (receive, send) + bus=session + interface=org.freedesktop.Akonadi**, + /etc/xdg/** r, /usr/bin/akonadiserver mr, + /usr/lib/x86_64-linux-gnu/libexec/drkonqi PUx, /usr/bin/mysql_install_db PUx -> mysqld_akonadi, /usr/bin/mysqladmin PUx -> mysqld_akonadi, /usr/bin/mysqlcheck PUx -> mysqld_akonadi, /usr/{,s}bin/mysqld PUx -> mysqld_akonadi, /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/initdb PUx -> postgresql_akonadi, /{usr/,usr/lib/postgresql/*/,opt/pgsql*/}bin/pg_ctl PUx -> postgresql_akonadi, /{usr/,usr/lib/postgresql/*/}bin/pg_upgrade PUx -> postgresql_akonadi, /usr/sbin/mysqld PUx -> mysqld_akonadi, /usr/share/mime/mime.cache r, /usr/share/mime/packages/ r, /usr/share/mime/types r, /usr/share/qt/translations/* r, + /usr/share/mysql/** r, @{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/random/boot_id r, owner @{xdg_config_home}/* r, owner @{xdg_config_home}/akonadi* rw, owner @{xdg_config_home}/QtProject/qtlogging.ini r, owner @{xdg_config_home}/akonadi/ rw, owner @{xdg_config_home}/akonadi/* rwl, owner @{xdg_config_home}/akonadi/akonadiconnectionrc wl, owner @{xdg_config_home}/akonadi/akonadiconnectionrc.lock rwk, owner @{xdg_config_home}/akonadi/akonadiserverrc.lock rwk, owner @{xdg_data_home}/mime/mime.cache r, owner @{xdg_data_home}/mime/packages/ r, owner @{xdg_data_home}/mime/types r, owner @{xdg_data_home}/akonadi/ rw, owner @{xdg_data_home}/akonadi/* rwlk, owner @{xdg_data_home}/akonadi/** rwk, owner @{PROC}/@{pid}/loginuid r, owner @{PROC}/@{pid}/mounts r, + owner @{PROC}/[0-9]*/stat r, owner /{,var/}run/user/@{uid}/akonadi** rwk, + owner /{,var/}run/user/@{uid}/kdeinit** rwk, + owner /{,var/}run/user/@{uid}/kcrash** rwk, owner /tmp/#[0-9]* m, }