# ----------------------------------------------------------------------------
#
#    Copyright (C) 2000-2014 Synology Inc. All rights reserved.
#
# ----------------------------------------------------------------------------

#include <tunables/global>

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.FTS {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Import.Evernote {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/imagemagick>
	#include <abstractions.pkg/synocontentextract>

	capability	setgid,
	capability	chown,
	capability	fowner,
	capability	fsetid,

	/volume*/@appstore/NoteStation/**	mrwkix,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/{,**}		rwk,
	/volume*/@tmp/**		mrwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/**	mrwkix,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/share/{,**}	r,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Import.Notebook {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions.pkg/synocontentextract>
	#include <abstractions/imagemagick>

	capability	setgid,
	capability	chown,
	capability	fowner,
	capability	fsetid,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/**	mrkix,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/volume*/@appstore/NoteStation/tools/synonstodo		ix,
	/usr/syno/etc/synodrive.conf		rkl,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/var/packages/NoteStation/**		mrk,
	/volume*/@tmp/**		mrwk,
	/volume*/**		rk,
	/etc/crontab*		rwk,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Export.Notebook {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/notification>
	#include <abstractions/imagemagick>

	capability	setgid,
	capability	chown,
	capability	fowner,
	capability	fsetid,

	/volume*/@appstore/NoteStation/**	rkix,
	/volume*/@SynoDrive/NoteStation/**	rkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/**	mrwkix,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/var/packages/NoteStation/**		mrk,
	/volume*/@tmp/**		mrwk,
	/volume*/**		rwk,
	/usr/syno/bin/synodsmnotify		px,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Info {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/var/packages/NoteStation/**		mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/packages/NoteStation/conf	k,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Native {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/var/packages/NoteStation/**		mrwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/packages/NoteStation/conf	rk,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Note {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions.pkg/synocontentextract>
	#include <abstractions/imagemagick>

	capability	setgid,
	capability 	chown,
	capability	fowner,
	capability	fsetid,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volume*/@tmp/**			rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@tmp/**			rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc.defaults/mimetypes.txt	r,
	/volume*/**					mrwk,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Note.Ghost {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/imagemagick>
	#include <abstractions.pkg/synocontentextract>

	capability	setgid,
	capability	chown,
	capability	fowner,
	capability	fsetid,
	capability	block_suspend,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volume*/@tmp/**			rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@tmp/**			rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc.defaults/mimetypes.txt	r,
	/volume*/**					mrwk,
	/usr/syno/etc/preference/*/usersettings			r,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Note.AppLink {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability	fowner,
	capability	chown,

	/volume*/@appstore/NoteStation/**	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwkl,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/**	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/volume*/@tmp/**					rwk,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Notebook {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/{,**}		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**             rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Notebook.Polling {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,
	capability	fowner,
	capability	fsetid,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**			rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Note.Encrypt {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Note.Polling {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions.pkg/synocontentextract>
	#include <abstractions/imagemagick>

	capability	setgid,
	capability 	chown,
	capability	fowner,
	capability	fsetid,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volume*/@tmp/**			rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@tmp/**			rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc.defaults/mimetypes.txt	r,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Note.Version {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Permission {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/packages/NoteStation/conf			k,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Permission.Public {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/packages/NoteStation/conf			k,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Permission.User {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/notification>

	capability	setgid,
	capability	chown,
	capability	fowner,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/preference/**		rwk,
	/usr/syno/etc/packages/NoteStation/conf			k,
	/usr/syno/bin/synodsmnotify		px,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Permission.Group {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/notification>

	capability	setgid,
	capability	chown,
	capability	fowner,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/preference/**		rwk,
	/usr/syno/etc/packages/NoteStation/conf			k,
	/usr/syno/bin/synodsmnotify		px,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Setting {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/notification>
	#include <abstractions.pkg/synocontentextract>
	#include <abstractions/imagemagick>

	capability	fowner,
	capability	setgid,
	capability	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/					rwk,
	/volume*/@SynoDrive/NoteStation/{,**}	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/				rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/{,**}	rwkl,
	/usr/syno/etc/synodrive.conf{,*}	rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/var/packages/NoteStation/**		mrwk,
	/volume*/@appstore/NoteStation/tools/synonstodo		ix,
	/usr/syno/etc/scheduled_tasks		rwk,
	/etc/crontab*						rwk,
	/usr/libexec/task_remove/{,**}		ixr,
	/usr/syno/sbin/synosharesnap		ix,
	/etc/power_sched.conf				r,
	/volume*/@SynoDrive/@tmp/{,**}		rwk,
	/usr/syno/bin/synodsmnotify		px,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Setting.DSM {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability	chown,

	/volume*/@appstore/NoteStation/** 	mr,
	/usr/syno/synoman/webapi/*{.lib,.def}	rwk,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Setting.Volume {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/webapi-DSM5>

	capability	setgid,
	capability  fowner,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/                                         rwk,
	/volume*/@SynoDrive/NoteStation/{,**}	rwkl,
	/volume*/@SynoDrive/@tmp/{,**}		rwk,
	/volume*/@SynoDrive/NoteStation.volume_move/{,**}            rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/**     mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/ rwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/{,**} rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/{,**}        rwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation.volume_move/{,**} rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/packages/NoteStation/synopkg_conf/** rwkl,
	/volume*/@deleted_subvol/{,**} rwk,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Shard {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/etc/preference/*/usersettings	r,
	/usr/syno/synoman/webapi/SYNO.Core.DDNS.lib                  rwk,
	/usr/syno/synoman/webapi/SYNO.Core.QuickConnect.lib          rwk,
	/usr/syno/synoman/webapi/SYNO.Core.Region.lib          rwk,
	/usr/syno/synoman/webapi/lib.def                             rwk,
	/etc/ddns.conf                                               r,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Shard.Link {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/usr/syno/synoman/webapi/SYNO.Core.DDNS.lib		rwk,
	/usr/syno/synoman/webapi/SYNO.Core.QuickConnect.lib	rwk,
	/usr/syno/synoman/webapi/lib.def			rwk,
	/etc/ddns.conf                              r,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Share.Priv {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Shortcut {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}


^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Tag {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Stack {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**		rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**		rwk,
	/usr/syno/etc/synodrive.conf		rk,
	/usr/syno/etc/synodrive/{,**} rwkl,
}

^/usr/syno/sbin/synoscgi//SYNO.NoteStation.Todo {
	#include <abstractions/base>
	#include <abstractions/base-cgi>
	#include <abstractions/share>
	#include <abstractions/pgsql>
	#include <abstractions/authentication>
	#include <abstractions/notification>

	capability	setgid,
	capability 	chown,

	/volume*/@appstore/NoteStation/** 	mrwk,
	/volume*/@SynoDrive/NoteStation/**	rwkl,
	/volume*/@SynoDrive/@tmp/**             rwk,
	/volumeUSB*/usbshare*/@sharebin/@appstore/NoteStation/** 	mrwk,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/NoteStation/**	rwkl,
	/volumeUSB*/usbshare*/@sharebin/@SynoDrive/@tmp/**             rwk,
	/usr/syno/etc/synodrive.conf		rwk,
	/usr/syno/etc/synodrive/{,**} rwkl,
	/volume*/@appstore/NoteStation/tools/synonstodo		ix,
	/usr/syno/etc/scheduled_tasks		rwk,
	/etc/crontab*						rwk,
	/usr/libexec/task_remove/{,**}		ixr,
	/usr/syno/sbin/synosharesnap		ix,
	/etc/power_sched.conf				r,
	/proc/*/attr/exec					w,
	/usr/syno/bin/synodsmnotify		px,
}
