[tor-bugs] #9460 [Tor bundles/installation]: Tor AppArmor profile prevents obfsproxy from starting

[Tor Bug Tracker & Wiki]

#9460: Tor AppArmor profile prevents obfsproxy from starting
--------------------------------------+-------------------------------------
 Reporter:  proper                    |          Owner:  weasel
     Type:  defect                    |         Status:  new   
 Priority:  major                     |      Milestone:        
Component:  Tor bundles/installation  |        Version:        
 Keywords:                            |         Parent:  #5791 
   Points:                            |   Actualpoints:        
--------------------------------------+-------------------------------------
Changes (by intrigeri):

 * cc: intrigeri@… (added)


Comment:

 I agree with weasel that Tor should not have all privs obfsproxy needs:
 else we're slowly defeating the whole idea of per-program confinement. It
 looks like either the Tor profile should start obfsproxy in an unconfined
 manner, or (better) the obfsproxy package should ship with its own
 AppArmor profile.

 proper: by the way, it was almost pure chance that I was just pointed to
 this bug report. If weasel prefers such issues being reported here instead
 of on the Debian BTS, fine with me, but then you might want to point me at
 / Cc: me AppArmor-related issues.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9460#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online