[tor-bugs] #6996 [Obfsproxy]: Problems with starting managed Obfsproxy server when installed via debian package and with Tor as service

[Tor Bug Tracker & Wiki]

#6996: Problems with starting managed Obfsproxy server when installed via debian
package and with Tor as service
-----------------------+----------------------------------------------------
 Reporter:  linda      |          Owner:  asn             
     Type:  defect     |         Status:  new             
 Priority:  normal     |      Milestone:                  
Component:  Obfsproxy  |        Version:  Tor: 0.2.3.22-rc
 Keywords:             |         Parent:                  
   Points:             |   Actualpoints:                  
-----------------------+----------------------------------------------------

Comment(by Christian):

 With obfsproxy-0.2.1-2~precise+1 from http://deb.torproject.org, we have
 an AppArmor issue again:

 {{{
 [warn] Our communication channel with the managed proxy
 '/usr/bin/obfsproxy' closed. Most probably application stopped running.
 }}}

 And the syslog has:

 {{{
 type=1400 audit(1366160396.398:13): apparmor="DENIED" operation="open"
 parent=21994 profile="system_tor" name="/usr/include/python2.7/pyconfig.h"
 pid=21996 comm="obfsproxy" requested_mask="r" denied_mask="r" fsuid=106
 ouid=0
 }}}

 My `/etc/apparmor.d/local/system_tor` already has:

 {{{
 /usr/bin/obfsproxy ix,
 }}}

 With the new denied message above, I tried to extend this as:

 {{{
         /usr/bin/obfsproxy ix,
         /usr/include/python2.7/pyconfig.h ixr,
 }}}

 But now even more messages are spewed out:

 {{{
 type=1400 audit(1366169189.559:36): apparmor="DENIED" operation="open"
 parent=31676 profile="system_tor" name="/usr/local/lib/python2.7/dist-
 packages/" pid=31680 comm="obfsproxy" requested_mask="r" denied_mask="r"
 fsuid=106 ouid=0

 type=1400 audit(1366169189.559:37): apparmor="DENIED" operation="open"
 parent=31676 profile="system_tor"
 name="/usr/share/pyshared/zope.interface-3.6.1-nspkg.pth" pid=31680
 comm="obfsproxy" requested_mask="r" denied_mask="r" fsuid=106 ouid=0

 type=1400 audit(1366169189.559:38): apparmor="DENIED" operation="open"
 parent=31676 profile="system_tor" name="/etc/python2.7/sitecustomize.py"
 pid=31680 comm="obfsproxy" requested_mask="r" denied_mask="r" fsuid=106
 ouid=0

 type=1400 audit(1366169189.559:39): apparmor="DENIED" operation="open"
 parent=31676 profile="system_tor" name="/usr/bin/obfsproxy" pid=31680
 comm="obfsproxy" requested_mask="r" denied_mask="r" fsuid=106 ouid=0

 type=1400 audit(1366169189.559:40): apparmor="DENIED" operation="open"
 parent=31676 profile="system_tor" name="/usr/bin/obfsproxy" pid=31680
 comm="obfsproxy" requested_mask="r" denied_mask="r" fsuid=106 ouid=0
 }}}

 I'll have to read up on AppArmor 101 and find out how to continue from
 here...

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6996#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online