[pkg-apparmor] Tor does not start with latest Linux kernel

intrigeri intrigeri at debian.org
Wed Nov 1 07:11:15 UTC 2017


Viktor Jägersküpper:
> Viktor Jägersküpper:
>> Then I installed the package "apparmor" and after a restart tor started again. Is there a dependency missing in the tor package?

Thank for your bug report. I've just filed it as an actual bug report
against the tor package so it's better tracked :)

> After reading various related bug reports and mails I conclude that tor
> should not depend on apparmor. But I assume it should work even if the
> apparmor package is not installed. Is this right?

Agreed. Can you please temporarily deinstall the apparmor package,
apply this change to the tor at default.service unit (using "systemctl
edit"):

--- a/debian/systemd/tor at default.service
+++ b/debian/systemd/tor at default.service
@@ -20,7 +20,7 @@ Restart=on-failure
 LimitNOFILE=65536
 
 # Hardening
-AppArmorProfile=system_tor
+AppArmorProfile=-system_tor
 NoNewPrivileges=yes
 PrivateTmp=yes
 PrivateDevices=yes

… then reboot and check if tor has started correctly?
Either way, please let us know how it went.

Cheers!




More information about the pkg-apparmor-team mailing list