Support more distributions in the AppArmor profiles

Authored by nl6720 on Dec 26 2019, 2:02 AM.

Description

Support more distributions in the AppArmor profiles

Summary:
This fixes Akonadi on Arch Linux (and possibly others).

Changes to the AppArmor profiles:

  • Allow writing and locking /run/user/${uid}/akonadi, the database engine socket is stored there.
  • Add abstractions/consoles, needed for console output.

PostgreSql specific:

  • Add bash (it is a common default shell).
  • Support /usr/bin/* paths for PostgreSQL binaries.
  • Support pg_upgrade.

MySQL specific:

  • Add bash (it is a common default shell).
  • Add /usr/bin/mysqld as a path for the MySQL daemon binary.
  • Add abstractions/openssl. When using MySQL, both akonadiserver and mysqld will try to read /etc/ssl/openssl.cnf.
  • Add /etc/my.cnf and /etc/my.cnf.d/, on Arch Linux the my.cnf configuration is stored there.

Test Plan: akonadictl start on a system with active AppArmor and loaded profiles.

Reviewers: KDE PIM, knauss

Reviewed By: KDE PIM, knauss

Subscribers: arojas, dvratil, knauss, jriddell, kde-pim, KDE PIM

Tags: KDE PIM

Differential Revision: https://phabricator.kde.org/D25964

Details

Committed
knaussDec 26 2019, 2:09 AM
Reviewer
KDE PIM
Differential Revision
D25964: Support more distributions in the AppArmor profiles
Parents
R165:57d597d7bf0a: Remove unused include
Branches
Unknown
Tags
Unknown