#include <tunables/global>

@{xdg_data_home}=@{HOME}/.local/share

profile mysqld_akonadi {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  capability setgid,
  capability setuid,

  signal receive set=kill peer=/usr/bin/akonadiserver,
  signal receive set=term peer=/usr/bin/akonadiserver,

  /etc/my.cnf r,
  /etc/my.cnf.d/ r,
  /etc/my.cnf.d/* r,
  /etc/ssl/openssl.cnf r,
  @{sys}/devices/system/cpu/ r,
  /{usr/,}bin/cat mrix,
  /{usr/,}bin/chmod mrix,
  /{usr/,}bin/dirname mrix,
  /{usr/,}bin/hostname mrix,
  /{usr/,}bin/mkdir mrix,
  /{usr/,}bin/sed mrix,
  /usr/bin/my_print_defaults mrix,
  /usr/bin/mysql_install_db mrix,
  /usr/bin/mysqladmin mrix,
  /usr/bin/mysqlcheck mrix,
  /usr/bin/mysqld mrix,
  /usr/share/mysql/** r,
  owner @{xdg_data_home}/akonadi/** rwk,
  owner @{PROC}/@{pid}/loginuid r,
  owner /{,var/}run/user/*/akonadi/* rw,
}