[Pkg-privacy-maintainers] Bug#935058: torbrowser-launcher: Fails to start because apparmor prevents acces to mutter/xwayland xauth file

[Frederik Himpe]

Package: torbrowser-launcher
Version: 0.3.2-1
Severity: important

torbrowser-launcher fails to start with this apparmor message in kernel log:

[  135.043787] audit: type=1400 audit(1566153604.771:58): apparmor="DENIED"
operation="open" profile="torbrowser_firefox" name="/run/user/1000/.mutter-
Xwaylandauth.B4GI6Z" pid=4793 comm="firefox.real" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=1000

This happens when starting torbrowser-launcher in a GNOME Wayland session with
Mutter 3.33.90-2 from Experimental.



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'oldoldstable'), (500, 'testing'), (400, 'unstable'), (250, 'stable'), (160, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.2.0-2-amd64 (SMP w/12 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages torbrowser-launcher depends on:
ii  ca-certificates   20190110
ii  libdbus-glib-1-2  0.110-4
ii  python3           3.7.3-1
ii  python3-gpg       1.13.0-2
ii  python3-pyqt5     5.12.3+dfsg-1
ii  python3-requests  2.21.0-1
ii  python3-socks     1.6.8+dfsg-1

Versions of packages torbrowser-launcher recommends:
ii  tor  0.4.0.5-2

Versions of packages torbrowser-launcher suggests:
ii  apparmor  2.13.3-4

-- no debconf information