# ----------------------------------------------------------------------------
#
#    Copyright (C) 2000-2017 Synology Inc. All rights reserved.
#
# ----------------------------------------------------------------------------

#include <tunables/global>
^/usr/syno/sbin/synoscgi//SYNO.Personal.Notification {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/libsynopersonalnotify>
	#include <abstractions.pkg/libsynoscim>
	/var/packages/*/conf/notification_filter.default*                       rwk,
}
^/usr/syno/sbin/synoscgi//SYNO.Personal.Profile {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/libsynoscim>
}

^/usr/syno/sbin/synoscgi//SYNO.Personal.MailAccount {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/SynologyApplicationService/mail>
	#include <abstractions.pkg/libsynoscim>
}

^/usr/syno/sbin/synoscgi//SYNO.Personal.MailAccount.Contacts {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/SynologyApplicationService/mail>
	/usr/syno/synoman/webapi/lib.def						  rk,
	/volume*/@appstore/MailClient/webapi/SYNO.AddressBook.lib rk,
}

^/usr/syno/sbin/synoscgi//SYNO.Personal.MailAccount.Mail {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/SynologyApplicationService/mail>
	/usr/syno/bin/synowebapi                                 ux,
	/volume*/{,**}                                           rm,
	/volume*/@{,**}                                          rw,
	/volume*/usbshare*/@*/**                                 rw,
	/usr/syno/synoman/webapi/lib.def						 rk,
	/volume*/@appstore/MailClient/webapi/SYNO.MailClient.lib rk,
}

^/usr/syno/sbin/synoscgi//SYNO.Personal.Application {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
}

^/usr/syno/sbin/synoscgi//SYNO.SAS.Encryption {
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	/var/packages/*/conf/notification                                       rwk,
}

^/volume*/@appstore/SynologyApplicationService/tools/notification_send {
	#include <abstractions/notification>
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/libsynopersonalnotify>
	#include <abstractions.pkg/libsynoscim>
	/usr/syno/synoman/webapi/SYNO.Personal.MailAccount.lib                  rk,
	/var/packages/*/conf/notification                                       rwk,
	/var/packages/*/conf/notification_filter.default*                       rwk,
	/var/packages/SynologyApplicationService/etc/settings.conf*             rwk,
	/volume*/@appstore/Node.js_v*/usr/local/bin/node                        ux,
	/volume*/@appstore/{,**}                                                rwk,
	/usr/syno/etc/private/sas*                                              rwk,
}

^/volume*/@appstore/SynologyApplicationService/tools/synosashookaction {
	#include <abstractions.pkg/SynologyApplicationService/base>
	/volume*/@appstore/SynologyApplicationService/hook/{,**}                rix,
}

^/volume*/@appstore/SynologyApplicationService/daemon-tasks/ {
	#include <abstractions/notification>
	#include <abstractions.pkg/SynologyApplicationService/base>
	#include <abstractions.pkg/SynologyApplicationService/webapi>
	#include <abstractions.pkg/libsynopersonalnotify>
	#include <abstractions.pkg/libsynoscim>
	/usr/syno/etc/private/session											rwk,
	/usr/syno/etc/private/session/current.users								rwk,
}

^/volume*/@appstore/SynologyApplicationService/daemon/pgbouncer {
	#include <abstractions/base>
	#include <abstractions.pkg/SynologyApplicationService/base>
	network inet dgram,

	/volume*/@appstore/SynologyApplicationService/etc/pgbouncer.ini      r,
	/etc/hosts                                                           r,
	/etc/resolv.conf                                                     r,
}