[Pkg-privacy-maintainers] Bug#824460: torbrowser upgrades still broken with apparmor enabled

[georg at riseup.net]

version: 0.1.9-1+deb8u3

On 16-05-16 10:47:54, Holger Levsen wrote:
> so it seems upgrades of torbrowser are still not working using the
> apparmor rules from torbrowser-launcher in sid.

Jessie is affected as well.
Here are the relevant logs from my test made yesterday:

May 15 08:12:38 debian kernel: [  106.598753] audit: type=1400 audit(1463314358.156:61): apparmor="STATUS" operation="profile_load" name="system_tor" pid=2489 comm="apparmor_parser"
May 15 08:12:38 debian tor[2536]: Starting tor daemon...done.
May 15 08:12:39 debian kernel: [  108.413825] audit: type=1400 audit(1463314359.968:62): apparmor="STATUS" operation="profile_load" name="/usr/bin/torbrowser-launcher" pid=2586 comm="apparmor_parser"
May 15 08:12:40 debian kernel: [  108.592963] audit: type=1400 audit(1463314360.152:63): apparmor="STATUS" operation="profile_load" name="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Tor/tor" pid=2594 comm="apparmor_parser"
May 15 08:12:40 debian kernel: [  109.047827] audit: type=1400 audit(1463314360.608:64): apparmor="STATUS" operation="profile_load" name="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" pid=2602 comm="apparmor_parser"
May 15 08:12:53 debian kernel: [  121.839612] audit: type=1400 audit(1463314373.400:65): apparmor="ALLOWED" operation="mknod" profile="/usr/bin/torbrowser-launcher" name="/usr/lib/python2.7/dist-packages/torbrowser_launcher/__init__.pyc" pid=2653 comm="torbrowser-laun" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
May 15 08:12:53 debian kernel: [  121.878588] audit: type=1400 audit(1463314373.436:66): apparmor="ALLOWED" operation="mknod" profile="/usr/bin/torbrowser-launcher" name="/usr/lib/python2.7/dist-packages/torbrowser_launcher/common.pyc" pid=2653 comm="torbrowser-laun" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
May 15 08:12:54 debian kernel: [  123.063284] audit: type=1400 audit(1463314374.624:67): apparmor="ALLOWED" operation="mknod" profile="/usr/bin/torbrowser-launcher" name="/usr/lib/python2.7/dist-packages/torbrowser_launcher/settings.pyc" pid=2653 comm="torbrowser-laun" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
May 15 08:12:54 debian kernel: [  123.070623] audit: type=1400 audit(1463314374.628:68): apparmor="ALLOWED" operation="mknod" profile="/usr/bin/torbrowser-launcher" name="/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.pyc" pid=2653 comm="torbrowser-laun" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
May 15 08:14:14 debian kernel: [  203.266401] audit: type=1400 audit(1463314454.824:69): apparmor="DENIED" operation="link" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/user/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/.cache/fontconfig/CACHEDIR.TAG.LCK" pid=2685 comm="firefox" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/use
May 15 08:14:14 debian kernel: [  203.266520] audit: type=1400 audit(1463314454.824:70): apparmor="DENIED" operation="link" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/user/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/.cache/fontconfig/8131ec73ed69543fcdb4c5ad42e8e92e-le64.cache-4.LCK" pid=2685 comm="firefox" requested_mask="l" denied_mask="l" fsuid
May 15 08:14:17 debian kernel: [  205.728555] audit: type=1400 audit(1463314457.284:71): apparmor="DENIED" operation="link" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox" name="/home/user/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/.cache/fontconfig/8131ec73ed69543fcdb4c5ad42e8e92e-le64.cache-4.LCK" pid=2685 comm="firefox" requested_mask="l" denied_mask="l" fsuid
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-privacy-maintainers/attachments/20160516/9b35048d/attachment.sig>