[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #14014 [Applications/Tor bundles/installation]: Add obfs4proxy to the default tor apparmor profile
#14014: Add obfs4proxy to the default tor apparmor profile
-------------------------------------------------+-------------------------
Reporter: vladtsyrklevich | Owner: weasel
Type: enhancement | Status:
| reopened
Priority: Low | Milestone:
Component: Applications/Tor | Version:
bundles/installation |
Severity: Normal | Resolution:
Keywords: apparmor obfs4 | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by ccppuu):
I can confirm the comment left by @alimj - On my own Ubuntu 16.04 test
systems with Tor 0.3.0.9 (git-100816d92ab5664d), the latest release at the
time of writing, AppArmor will block obfs4proxy from operating unless the
`/etc/apparmor.d/abstractions/tor` entries for the obfs4proxy binaries are
changed from `PUx` to `ix`.
[https://github.com/jlund/streisand Streisand] is currently carrying a
[https://github.com/jlund/streisand/blob/5cab34a22892666eeba9411b810f9d039706ba56/playbooks/roles
/tor-bridge/tasks/main.yml#L50:L66 a workaround patch] that I would love
to remove :-)
How can I help resolve this bug upstream? Is there someone more familiar
with AppArmor that could explain the intention of the `PUx` modifiers
present in the debian package's abstractions file?
Thanks! -- @cpu
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14014#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs