[Pkg-privacy-maintainers] Bug#881496: onioncircuits: python3/testing and apparmor/testing breaks onioncircuits

[Mykola Nikishov]

Package: onioncircuits
Version: 0.5-1
Followup-For: Bug #881496

This works for me now:

--8<---------------cut here---------------start------------->8---
$ apt-cache policy onioncircuits python3 apparmor
onioncircuits:
  Installed: 0.5-1
  Candidate: 0.5-1
  Version table:
 *** 0.5-1 100
         60 tor+http://httpredir.debian.org/debian testing/main amd64 Packages
         70 tor+http://httpredir.debian.org/debian unstable/main amd64 Packages
        100 /var/lib/dpkg/status
     0.4-3 500
        500 tor+http://httpredir.debian.org/debian stable/main amd64 Packages
python3:
  Installed: 3.5.3-1
  Candidate: 3.5.3-1
  Version table:
     3.6.3-2 70
         60 tor+http://httpredir.debian.org/debian testing/main amd64 Packages
         70 tor+http://httpredir.debian.org/debian unstable/main amd64 Packages
 *** 3.5.3-1 500
        500 tor+http://httpredir.debian.org/debian stable/main amd64 Packages
        100 /var/lib/dpkg/status
apparmor:
  Installed: 2.11.1-3
  Candidate: 2.11.1-3
  Version table:
 *** 2.11.1-3 100
         60 tor+http://httpredir.debian.org/debian testing/main amd64 Packages
         70 tor+http://httpredir.debian.org/debian unstable/main amd64 Packages
        100 /var/lib/dpkg/status
     2.11.0-3 500
        500 tor+http://httpredir.debian.org/debian stable/main amd64 Packages
--8<---------------cut here---------------end--------------->8---

Downgrading to apparmor/stable still works. So, python3/stable +
apparmor/{stable,testing} are OK.

As the package doesn't suggest/recommend apparmor, it took me some
time to realise it may be related to apparmor's rules. Upgrade to
python3/testing and check logs:

    audit[3722]: AVC apparmor="DENIED" operation="file_mmap" profile="/usr/bin/onioncircuits" name="/usr/lib/python3.6/lib-dynload/_ctypes.cpython-36m-x86_64-linux-gnu.so" pid=3722 comm="onioncircuits" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

So, python3/testing + apparmor/testing is a breaking
combination. Downgrading to apparmor/stable fixes the problem.

-- System Information:
Debian Release: buster/sid
  APT prefers stable
  APT policy: (500, 'stable'), (70, 'unstable'), (60, 'testing'), (50, 'experimental')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages onioncircuits depends on:
ii  gir1.2-glib-2.0    1.54.1-3
ii  gir1.2-gtk-3.0     3.22.26-1
ii  python3-gi         3.22.0-2
ii  python3-pycountry  17.5.14+ds1-0.1
ii  python3-stem       1.6.0-1
pn  python3:any        <none>

onioncircuits recommends no packages.

Versions of packages onioncircuits suggests:
ii  tor-geoipdb  0.3.1.8-2

-- no debconf information