File: //etc/apparmor.d/pkg_SynoFinder
# ----------------------------------------------------------------------------
#
# Copyright (C) 2000-2016 Synology Inc. All rights reserved.
#
# ----------------------------------------------------------------------------
#include <tunables/global>
^/usr/syno/sbin/synoscgi//SYNO.Finder.FileIndexing.Folder {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions/fileindex>
#include <abstractions/synotifyd>
#include <abstractions/synoservice>
#include <abstractions/libsynodaemon>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
/volume*/@*@/{,**} rwk,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.FileIndexing.Status {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions/fileindex>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
capability kill,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.File.Thumbnail {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions.pkg/SynoFinder/base>
#include <abstractions.pkg/SynoFinder/api_runner>
#include <abstractions/imagemagick>
capability fowner,
/volume*/{,**} rwk,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.File.Cover {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions.pkg/SynoFinder/base>
#include <abstractions.pkg/SynoFinder/api_runner>
#include <abstractions/imagemagick>
capability fowner,
/volume*/{,**} rwk,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.Bookmark {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.FileIndexing.Search {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
capability chown,
capability kill,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.Elastic.SearchHistory {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.FileIndexing.Highlight {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.Elastic.Term {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.Elastic.Spotlight {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.FileIndexing.Indicate {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
}
^/usr/syno/sbin/synoscgi//SYNO.Finder.Preference {
#include <abstractions/base>
#include <abstractions/base-cgi>
#include <abstractions/authentication>
#include <abstractions/nameservice>
#include <abstractions.pkg/SynoFinder/base>
capability fowner,
capability chown,
}