Package: torbrowser-launcher
Version: 0.2.6-1
Severity: normal
Hi,
torbrowser-launcher would not start with
'/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Tor/tor'
set to enforce mode. I get the "Tor launcher" "Tor exited during
startup..." dialog. Restarting doesn't help but setting the above
profile to complain mode does the trick (note that
'/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox'
can stay in enforce mode. Attached is apparmor output, I can't spot
anything related to tor itself there.
Cheers,
-- Guido
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'),
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages torbrowser-launcher depends on:
ii ca-certificates 20160104
ii gnupg 1.4.20-6
ii python-gtk2 2.24.0-5
ii python-lzma 0.5.3-3
ii python-parsley 1.2-1
ii python-psutil 4.2.0-1
ii python-twisted 16.3.0-1
ii python-txsocksx 1.15.0.2-1
pn python:any <none>
ii wmctrl 1.07-7
Versions of packages torbrowser-launcher recommends:
ii tor 0.2.8.7-1
Versions of packages torbrowser-launcher suggests:
ii apparmor 2.10.95-4
pn python-pygame <none>
-- Configuration Files:
/etc/apparmor.d/torbrowser.Tor.tor changed:
/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Tor/tor
flags=(complain) {
#include <abstractions/base>
network tcp,
network udp,
/etc/host.conf r,
/etc/nsswitch.conf r,
/etc/passwd r,
/etc/resolv.conf r,
owner
@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Tor/tor
mr,
owner
@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Data/Tor/*
rw,
owner
@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Data/Tor/lock
rwk,
owner
@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/Tor,Lib}/*.so
mr,
owner
@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/Tor,Lib}/*.so.*
mr,
@{PROC}/sys/kernel/random/uuid r,
/sys/devices/system/cpu/ r,
# OnionShare compatibility
/tmp/onionshare/** rw,
#include <local/torbrowser.Tor.tor>
}
-- no debconf information
Aug 26 09:34:28 bogon audit[18693]: AVC apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/dev/shm/" pid=18693 comm="firefox" requested_mask="r" denied_mask="r"
fsuid=1000 ouid=0
Aug 26 09:34:28 bogon kernel: audit: type=1400 audit(1472196868.322:853):
apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/etc/pulse/client.conf" pid=18693 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:28 bogon kernel: audit: type=1400 audit(1472196868.322:854):
apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/dev/shm/" pid=18693 comm="firefox" requested_mask="r" denied_mask="r"
fsuid=1000 ouid=0
Aug 26 09:34:28 bogon audit[18734]: AVC apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/proc/18734/fd/" pid=18734 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:28 bogon audit[18734]: AVC apparmor="DENIED" operation="exec"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/usr/bin/pulseaudio" pid=18734 comm="firefox" requested_mask="x"
denied_mask="x" fsuid=1000 ouid=0
Aug 26 09:34:28 bogon kernel: audit: type=1400 audit(1472196868.322:855):
apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/proc/18734/fd/" pid=18734 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:28 bogon kernel: audit: type=1400 audit(1472196868.322:856):
apparmor="DENIED" operation="exec"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/usr/bin/pulseaudio" pid=18734 comm="firefox" requested_mask="x"
denied_mask="x" fsuid=1000 ouid=0
Aug 26 09:34:31 bogon audit[18693]: AVC apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/run/resolvconf/resolv.conf" pid=18693 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:31 bogon kernel: audit: type=1400 audit(1472196871.134:857):
apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/run/resolvconf/resolv.conf" pid=18693 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon audit[18756]: AVC apparmor="ALLOWED" operation="open"
profile="/usr/bin/torbrowser-launcher"
name="/home/agx/.local/lib/python2.7/site-packages/" pid=18756
comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.063:858):
apparmor="ALLOWED" operation="open" profile="/usr/bin/torbrowser-launcher"
name="/home/agx/.local/lib/python2.7/site-packages/" pid=18756
comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:56 bogon audit[18756]: AVC apparmor="ALLOWED" operation="open"
profile="/usr/bin/torbrowser-launcher"
name="/sys/devices/pci0000:00/0000:00:1f.2/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/hw_sector_size"
pid=18756 comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.099:859):
apparmor="ALLOWED" operation="open" profile="/usr/bin/torbrowser-launcher"
name="/sys/devices/pci0000:00/0000:00:1f.2/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/hw_sector_size"
pid=18756 comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0
Aug 26 09:34:56 bogon audit[18756]: AVC apparmor="ALLOWED" operation="open"
profile="/usr/bin/torbrowser-launcher"
name="/home/agx/.local/lib/python2.7/site-packages/" pid=18756
comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.187:860):
apparmor="ALLOWED" operation="open" profile="/usr/bin/torbrowser-launcher"
name="/home/agx/.local/lib/python2.7/site-packages/" pid=18756
comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:56 bogon audit[18756]: AVC apparmor="ALLOWED" operation="open"
profile="/usr/bin/torbrowser-launcher"
name="/home/agx/.local/lib/python2.7/site-packages/" pid=18756
comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.227:861):
apparmor="ALLOWED" operation="open" profile="/usr/bin/torbrowser-launcher"
name="/home/agx/.local/lib/python2.7/site-packages/" pid=18756
comm="torbrowser-laun" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug 26 09:34:56 bogon audit[18757]: AVC apparmor="ALLOWED" operation="exec"
profile="/usr/bin/torbrowser-launcher" name="/sbin/ldconfig" pid=18757
comm="torbrowser-laun" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
target="/usr/bin/torbrowser-launcher//null-26"
Aug 26 09:34:56 bogon audit[18757]: AVC apparmor="ALLOWED" operation="open"
profile="/usr/bin/torbrowser-launcher//null-26" name="/etc/ld.so.cache"
pid=18757 comm="ldconfig" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon audit[18757]: AVC apparmor="ALLOWED" operation="getattr"
profile="/usr/bin/torbrowser-launcher//null-26" name="/etc/ld.so.cache"
pid=18757 comm="ldconfig" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.283:862):
apparmor="ALLOWED" operation="exec" profile="/usr/bin/torbrowser-launcher"
name="/sbin/ldconfig" pid=18757 comm="torbrowser-laun" requested_mask="x"
denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/torbrowser-launcher//null-26"
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.283:863):
apparmor="ALLOWED" operation="open"
profile="/usr/bin/torbrowser-launcher//null-26" name="/etc/ld.so.cache"
pid=18757 comm="ldconfig" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.283:864):
apparmor="ALLOWED" operation="getattr"
profile="/usr/bin/torbrowser-launcher//null-26" name="/etc/ld.so.cache"
pid=18757 comm="ldconfig" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon audit[18779]: AVC apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/run/udev/data/c226:0" pid=18779 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon audit[18777]: AVC apparmor="DENIED" operation="file_mmap"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/home/agx/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Tor/libgmp.so.10"
pid=18777 comm="firefox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=1000
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.431:865):
apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/run/udev/data/c226:0" pid=18779 comm="firefox" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon kernel: audit: type=1400 audit(1472196896.431:866):
apparmor="DENIED" operation="file_mmap"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/home/agx/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Tor/libgmp.so.10"
pid=18777 comm="firefox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=1000
Aug 26 09:34:56 bogon audit[18777]: AVC apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox"
name="/sys/devices/system/cpu/cpufreq/policy0/cpuinfo_max_freq" pid=18777
comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 26 09:34:56 bogon audit[18777]: AVC apparmor="DENIED" operation="open"
profile="/home/*/.local/share/torbrowse
