[Pkg-privacy-maintainers] Bug#793142: marked as done (torbrowser-launcher: torbrowser cannot start+update due to apparmor issues)

[santiagorr at riseup.net]

Holger,

El 06/03/16 a las 09:15, Debian Bug Tracking System escribió:
...
> 
> I'm closing this bug as the BTS has version tracking, thus 
> https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=torbrowser-launcher;dist=stable
> will still show this bug as open, while
> https://bugs.debian.org/torbrowser-launcher will correctly show this bug as
> fixed.
> 
> Also, strictly speaking 0.2.0-2 already fixed this bug (initially), but only
> 0.2.2-3 fixes the one (#808140) preventing the upgrade feature from torbrowser
> (itself) to work, thus the very first control line above.
> 
> That said, the fix for jessie and wheezy-backport is probably to just use the
> profiles from the sid version. This should be easily testable once
> 0.2.3-1~bpo8+1 will be available, which should be doable in 4 days, once the
> version in unstable migrated to testing.
>
> If someone wants to test sooner: just rebuild the sid source package on jessie
> and install and test it. Then please report back here :)

I've rebuilt the package on jessie, but I got this the first time I
tried to launch torbrowser-launcher:

audit: type=1400 audit(1457440407.716:146): apparmor="DENIED" operation="file_mmap" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/TorBrowser/Tor/libgmp.so.10" pid=3368 comm="firefox" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
audit: type=1400 audit(1457440408.036:147): apparmor="DENIED" operation="link" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/.cache/fontconfig/CACHEDIR.TAG.LCK" pid=3368 comm="firefox" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/.cache/fontconfig/CACHEDIR.TAG.TMP-dPlCHK"
audit: type=1400 audit(1457440408.036:148): apparmor="DENIED" operation="link" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/.cache/fontconfig/889ed3ff05f78fd24d4c5898ee6e3f83-le64.cache-4.LCK" pid=3368 comm="firefox" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/.cache/fontconfig/889ed3ff05f78fd24d4c5898ee6e3f83-le64.cache-4.TMP-gDvyzg"
audit: type=1400 audit(1457440409.052:149): apparmor="DENIED" operation="file_mmap" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/TorBrowser/Tor/libgmp.so.10" pid=3368 comm="firefox" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
audit: type=1400 audit(1457440409.364:150): apparmor="DENIED" operation="link" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/.cache/fontconfig/889ed3ff05f78fd24d4c5898ee6e3f83-le64.cache-4.LCK" pid=3368 comm="firefox" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/santiago/.local/share/torbrowser/tbb/x86_64/tor-browser_fr/Browser/.cache/fontconfig/889ed3ff05f78fd24d4c5898ee6e3f83-le64.cache-4.TMP-M4Ed4Q"

I still need to aa-disable /etc/apparmor.d/torbrowser.*

Cheers,

Santiago