D29030: AppArmor DBus rules for AkonadiServer

[Sandro Knauß]

knauss added a comment.


  Thanks dvratil and lukaskaras for explaining me how to debug Akonadi - I haven't done it yet. Btw. is there documentation existing for this?
  
  For my local kdepim 20.04 upgrade + mariadb 1:10.3.22-1 on Debian Sid. I need no modifications from the shipped ones to run my kdepim setup afterwards successfully ( and it is running for more than one day already :):
  
  - kcrash and drkonqi - this only happens, if Akonadi crashes and it does not crash for me yet - fully accepted
  - dbus interface, this is a new way to lockdown dbus usage - fully accepted
  - `kdeinit` - @dvratil does Akonadi uses/needs kdeinit?
  
  In the end we have those two modifications `/usr/share/mysql/**` and `@{PROC}/[0-9]*/stat` that I do not get, why it does not explode for me.
  So I want to understand, why you need such stuff and I don't:
  @lukaskaras:
  
  - Do you use MariaDB or Mysql?
  - Do you test a new installation or running an existing one?
  
  Both are points that already made in the past big difference for AppArmor profile and may explain the difference.
  
  @lukaskaras - I'm very sorry that I am such an nip-picker on this issue. I hope you understand, that AppArmor only gives us more security, if we only allow the needed stuff. I see that it is your second proposed patch on Phabricator - and than such a hard one, that keeps you busy for a long time - I hope I do not scared you off from this team because of my reaction. I hope you still will propose more patches, normally patches get merged without such a lot discussion. I really enjoy that others enable AppArmor and also proposing patches and also like the really detailed answers from your side.

REVISION DETAIL
  https://phabricator.kde.org/D29030

To: lukaskaras
Cc: dvratil, knauss, kde-pim, fbampaloukas, dcaliste, dvasin, rodsevich, winterz, vkrause, mlaurent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-pim/attachments/20200506/7d9e4468/attachment.html>