Bug#867342: tor: /usr/bin/obfs4proxy fails to load under default combination of apparmor execution permission PUx and systemd NoNewPrivileges=Yes hardening

2017-07-07 Thread Jason J. Ayala P.
> Do you mean obfs4proxy (rather than obfsproxy) i.e.: obfs4proxy, yes. > Do you have any AppArmor policy enabled for obfs4proxy? (use aa-status) No aa profile for /usr/bin/obfs4proxy With tor@default.service NoNewPrivileges=yes Editing abstractions/tor;

Bug#867342: tor: /usr/bin/obfs4proxy fails to load under default combination of apparmor execution permission PUx and systemd NoNewPrivileges=Yes hardening

2017-07-05 Thread Jason J. Ayala P.
Package: tor Version: 0.2.9.11-1~deb9u1 Severity: important Dear Maintainer, I was debugging why obfs4proxy was failing to load in Debian 9 (Whonix 14 developers), without any helpful error messages in the log. I notice that if I changed the AA execution permissions in abstractions/tor for