[Pkg-privacy-maintainers] Bug#913104: torbrowser-launcher: apparmor denials: lsb_release, fontconfig conf.avail, gtk-3.0 settings.ini

[Paul Wise]

Package: torbrowser-launcher
Version: 0.3.1-1
Severity: minor
Usertags: apparmor
File: /etc/apparmor.d/torbrowser.Browser.firefox
File: /etc/apparmor.d/torbrowser.Browser.plugin-container

I noticed some apparmor denials when I start Tor Browser, they do not
seem to have any effect but I wonder if they should be allowed.

AVC apparmor="DENIED" operation="exec" profile="torbrowser_firefox" name="/usr/bin/lsb_release" pid=20472 comm="firefox.real" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
AVC apparmor="DENIED" operation="open" profile="torbrowser_firefox" name="/usr/share/fontconfig/conf.avail/" pid=20184 comm="firefox.real" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
AVC apparmor="DENIED" operation="open" profile="torbrowser_plugin_container" name="/home/pabs/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/.config/gtk-3.0/settings.ini" pid=20839 comm="firefox.real" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="open" profile="torbrowser_plugin_container" name="/usr/share/fontconfig/conf.avail/" pid=20839 comm=57656220436F6E74656E74 requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
AVC apparmor="DENIED" operation="open" profile="torbrowser_plugin_container" name="/home/pabs/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/.config/gtk-3.0/settings.ini" pid=20922 comm="firefox.real" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="open" profile="torbrowser_plugin_container" name="/usr/share/fontconfig/conf.avail/" pid=20922 comm=57656220436F6E74656E74 requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

-- System Information:
Debian Release: buster/sid
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages torbrowser-launcher depends on:
ii  ca-certificates   20170717
ii  libdbus-glib-1-2  0.110-3
ii  python3           3.6.7-1
ii  python3-gpg       1.12.0-4
ii  python3-pyqt5     5.11.3+dfsg-1+b1
ii  python3-requests  2.20.0-2
ii  python3-socks     1.6.8+dfsg-1

Versions of packages torbrowser-launcher recommends:
ii  tor  0.3.4.8-1

Versions of packages torbrowser-launcher suggests:
ii  apparmor       2.13.1-3+b1
ii  python-pygame  1.9.1release+dfsg-10+b2

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/attachments/20181107/85e1ce4a/attachment.sig>