[Pkg-privacy-maintainers] Bug#980155: apparmor="DENIED" profile="torbrowser_firefox" name="/proc/874474/cgroup"

[Paul Wise]

Package: torbrowser-launcher
Version: 0.3.3-3
Severity: minor
File: /etc/apparmor.d/torbrowser.Browser.firefox
Usertags: warnings

When I start torbrowser-launcher I get apparmor denials like the
following. There don't appear to be any consequences for this denial,
the Tor Browser window starts up and works just fine. Possibly the
Firefox sandboxing uses this file but I'm not sure.

Jan 15 20:22:03 audit[874474]: AVC apparmor="DENIED" operation="open" profile="torbrowser_firefox" name="/proc/874474/cgroup" pid=874474 comm="firefox.real" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-1-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages torbrowser-launcher depends on:
ii  ca-certificates    20200601
ii  gnupg              2.2.20-1
ii  libdbus-glib-1-2   0.110-6
ii  python3            3.9.1-1
ii  python3-gpg        1.14.0-1+b2
ii  python3-packaging  20.8-1
ii  python3-pyqt5      5.15.2+dfsg-2
ii  python3-requests   2.25.1+dfsg-2
ii  python3-socks      1.7.1+dfsg-1

Versions of packages torbrowser-launcher recommends:
ii  tor  0.4.4.6-1

Versions of packages torbrowser-launcher suggests:
ii  apparmor  2.13.6-3

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/attachments/20210115/942c517b/attachment.sig>