capability ipc_lock,

/var/lib/synosmartblock/ rw,
/var/lib/synosmartblock/db.sqlite* rwk,
