Dear fellows,
I use Ubuntu Precise 12.04 and as I run a Bridge, I find the idea of confining Tor with an Apparmor profile charming.
When upgrading Ubuntu and Tor, the Apparmor stuff seemed to be automatically worked out, so I deleted my old handmade usr.sbin.tor profile as I found the new system_tor profile.
Wenn I type "sudo aa-status", I get system_tor as "enforced process" with its correct process id and there's no process "unconfined, but with a profile defined".
But when I type "sudo aa-unconfined", /usr/sbin/tor ist marked as "not confined".
So, what about that being charming? Is everything bad? Or good, and it's just I'm an idiot?
I tried to rename the system_tor profile to usr.sbin.tor and adjusted its name in the profile itself, but this only results in Tor being listed under "unconfined processes that have a profile defined" when typing "sudo aa-status".
Anybody who can see clear in this issue?
Any help is appreciated and thanks in advance.
christian
P.S.: I really did a "sudo service apparmor reload" ;-)