Bug#909364: tor: access to /etc/ssl/openssl.cnf denied by AppArmor

2018-10-21 Thread intrigeri 
Control: tag -1 + patch
Control: found -1 0.3.5.3-alpha-2

Jakub Wilk:
> Adding "#include " to /etc/apparmor.d/local/system_tor 
> fixed it for me.

Confirmed, thanks! (git format-)patch attached.

Cheers,
-- 
intrigeri

>From 94d9290c32677477c87b074894edefc935fdf43b Mon Sep 17 00:00:00 2001
From: intrigeri 
Date: Sun, 21 Oct 2018 07:37:44 +
Subject: [PATCH] AppArmor: allow reading the OpenSSL configuration (Closes:
 #909364)

---
 debian/tor.apparmor-profile.abstraction | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/tor.apparmor-profile.abstraction b/debian/tor.apparmor-profile.abstraction
index 15601a4a8..f2fe3c4e4 100644
--- a/debian/tor.apparmor-profile.abstraction
+++ b/debian/tor.apparmor-profile.abstraction
@@ -2,6 +2,7 @@
 
   #include 
   #include 
+  #include 
 
   network tcp,
   network udp,
-- 
2.19.1

Bug#909364: tor: access to /etc/ssl/openssl.cnf denied by AppArmor

2018-09-22 Thread Jakub Wilk 

Package: tor
Version: 0.3.4.8-1

I see this in dmesg:

   audit: type=1400 audit(1537624901.494:25): apparmor="DENIED" operation="open" profile="system_tor" 
name="/etc/ssl/openssl.cnf" pid=3277 comm="tor" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Adding "#include " to /etc/apparmor.d/local/system_tor 
fixed it for me.

--
Jakub Wilk