# ----------------------------------------------------------------------------
#
#    Copyright (C) 2000-2014 Synology Inc. All rights reserved.
#
# ----------------------------------------------------------------------------

#include <tunables/global>

/volume*/@appstore/HyperBackupVault/bin/img_backupd {
	#include <abstractions/autoblock>
	#include <abstractions/authentication>
	#include <abstractions/base>
	#include <abstractions/log>
	#include <abstractions/nameservice>
	#include <abstractions/openssl>
	#include <abstractions/btrfs>
	#include <abstractions/share>

	network tcp,

	capability mknod,  # for shared memory
	capability chown,
	capability fowner,
	capability setgid,
	capability dac_override, # for root access:  open(... , O_WRONLY | O_CREAT | O_TRUNC, S_IRWXU)
	capability block_suspend,  # for epoll()

	/volume*/@appstore/HyperBackupVault/bin/** 	ix,
	/volume*/@appstore/HyperBackupVault/lib/*   	m,

	/usr/syno/sbin/synoshare	ux,
	/usr/syno/bin/synodsmnotify     px,

	/etc/synoinfo.conf                    r,
	/usr/syno/etc/synobackup.conf*			rw, 	# for /usr/syno/etc/synobackup.conf.cxzIDf, open_mode="ac"
	/usr/syno/etc/synobackup_server.conf*		rw, 	# server targets
	/usr/syno/etc/synobackup/synobackup.conf		r, # for performance profiling
	/usr/syno/etc/synosmtp.conf                             r, # for Autoblock
	/usr/syno/etc/synosms.conf 				r, # for Restore from others
	/usr/local/etc/certificate/HyperBackupVault/**		r,
	/usr/local/share/synobackup/*				r,

	/usr/local/etc/services.d/HyperBackupVault.sc		r,
	/usr/syno/etc/ssl/ssl.key/server.key                    r,
	/usr/syno/etc/ssl/ssl.crt/server.crt                    r,
	/dev/shm/hyperbackup_vault*	rwk,	  # for shared memory

	/volume*/{,**}                rwlk,	  # for backup to shared folders
}