[pkg-apparmor] Bug#1121619: apparmor: transmission-daemon not able to access web interface html/js/css files

[Chris Barry]

Package: apparmor
Version: 4.1.0-1
Severity: normal
Tags: patch upstream
X-Debbugs-Cc: chris at barry.im

Dear Maintainer,

After enabling apparmor for transmission-daemon with `aa-enable /etc/apparmor.d/transmission` I was unable to load the web interface at http://localhost:9091/ . After checking dmesg logs I was able to see that the default profile does not allow access to "/usr/share/transmission/public_html/**".

I was able to fix this locally by adding that path to "/etc/apparmor.d/local/transmission-daemon", as follows:


```
/usr/share/transmission/public_html/** r,
```

In my opinion this should be applied to the debian package and possibly upstream.


-- System Information:
Debian Release: 13.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.48+deb13-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages apparmor depends on:
ii  debconf [debconf-2.0]  1.5.91
ii  libc6                  2.41-12

apparmor recommends no packages.

Versions of packages apparmor suggests:
ii  apparmor-profiles-extra  1.35
ii  apparmor-utils           4.1.0-1

-- Configuration Files:
/etc/apparmor.d/transmission changed [not included]

-- debconf information excluded