D29030: AppArmor DBus rules for AkonadiServer

[Sandro Knauß]

knauss accepted this revision.
knauss added a comment.
This revision is now accepted and ready to land.


  In D29030#665411 <https://phabricator.kde.org/D29030#665411>, @lukaskaras wrote:
  
  > > - kcrash and drkonqi - this only happens, if Akonadi crashes and it does not crash for me yet - fully accepted
  >
  > You may try to abort akonadi server by command:
  >
  > `killall -s ABRT akonadiserver`
  >
  > it should trigger Dr Konqi for your akonadiserver process
  
  
  thanks for this idea to break the Akonadi process. Okay I used this methods to test this on my system and I need these two lines added:
  
    ptrace read peer=mysqld_akonadi,
    owner /{,var/}run/user/@{uid}/kcrash** rwk,
  
  
  
  >   mysql> show variables like 'character_sets_dir';
  >   +--------------------+----------------------------+
  >   | Variable_name      | Value                      |
  >   +--------------------+----------------------------+
  >   | character_sets_dir | /usr/share/mysql/charsets/ |
  >   +--------------------+----------------------------+
  >   1 row in set (0.00 sec)
  >   
  
  Same for my system but do not need to add `/usr/share/mysql/`, strange. I also can verify that it is accessed by akonadiserver via strace. Maybe the default Apparmor rules differ for Ubuntu and Debian.
  
  Okay I think adding `/usr/share/mysql/` won't hurt as there is no private data inside.
  
  Let's add this and we reevalute this later.

REVISION DETAIL
  https://phabricator.kde.org/D29030

To: lukaskaras, knauss
Cc: dvratil, knauss, kde-pim, fbampaloukas, dvasin, rodsevich, winterz, vkrause, mlaurent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-pim/attachments/20200522/59e8a79b/attachment.htm>