D25964: Support more distributions in the AppArmor profiles

nl6720 noreply at phabricator.kde.org
Fri Dec 13 19:52:00 GMT 2019


nl6720 created this revision.
nl6720 added a reviewer: KDE PIM.
nl6720 added a project: KDE PIM.
Herald added a subscriber: kde-pim.
nl6720 requested review of this revision.

REVISION SUMMARY
  This fixes Akonadi with PostgreSQL on Arch Linux (and possibly others).
  
  Changes to the AppArmor profiles:
  
  - add `bash` (it is a common default shell),
  - add `abstractions/consoles`, needed for console output,
  - support `/usr/bin/*` paths for PostgreSQL binaries,
  - allow writing and locking `/run/user/${uid}/akonadi`, the PostgreSQL socket is stored there,
  - akonadiserver requires `file_mmap` on `/tmp/#[0-9]*`, but `abstractions/user-tmp` does not provide it.

TEST PLAN
  `akonadictl start` on a system with active AppArmor and loaded profiles.

REPOSITORY
  R165 Akonadi

REVISION DETAIL
  https://phabricator.kde.org/D25964

AFFECTED FILES
  apparmor/postgresql_akonadi
  apparmor/usr.bin.akonadiserver

To: nl6720, #kde_pim
Cc: kde-pim, #kde_pim, fbampaloukas, dcaliste, dvasin, rodsevich, winterz, vkrause, mlaurent, knauss, dvratil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-pim/attachments/20191213/5cb4f9a6/attachment.html>


More information about the kde-pim mailing list