Your message dated Sun, 23 Mar 2014 09:20:25 +0000
with message-id <[email protected]>
and subject line Bug#739279: fixed in tor 0.2.5.3-alpha-1
has caused the Debian Bug report #739279,
regarding tor: AppArmor profile prevents tor from starting obfsproxy
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
739279: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739279
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tor
Version: 0.2.4.20-1
Severity: normal
Tags: patch
Hi,
as reported on Tor's ticket tracker (#9460, #6996), the AppArmor
profile we ship in the tor package prevents obfsproxy from starting.
This is fixed by the attached patch (against the debian-0.2.4 branch
in your packaging repository), that allows running obfsproxy under its
own profile if available, else unconfined. Successfully tested on
a Wheezy system with tor 0.2.4.x from deb.t.o and obfsproxy from
wheezy-backports.
My next step will be to write an AppArmor profile for obfsproxy, and
have it shipped with the obfsproxy package.
Cheers,
--
intrigeri
| GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
| OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
>From 59cbd65d849f8254957682a6875a51157141d681 Mon Sep 17 00:00:00 2001
From: intrigeri <[email protected]>
Date: Mon, 17 Feb 2014 12:40:11 +0000
Subject: [PATCH] AppArmor: allow running obfsproxy under its own profile if
available, else unconfined.
---
debian/tor.apparmor-profile.abstraction | 2 ++
1 file changed, 2 insertions(+)
diff --git a/debian/tor.apparmor-profile.abstraction b/debian/tor.apparmor-profile.abstraction
index d680215..f3aef3c 100644
--- a/debian/tor.apparmor-profile.abstraction
+++ b/debian/tor.apparmor-profile.abstraction
@@ -22,3 +22,5 @@
/etc/tor/* r,
/usr/share/tor/** r,
+
+ /usr/bin/obfsproxy PUx,
--
1.9.0.rc3
--- End Message ---
--- Begin Message ---
Source: tor
Source-Version: 0.2.5.3-alpha-1
We believe that the bug you reported is fixed in the latest version of
tor, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Palfrader <[email protected]> (supplier of updated tor package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 23 Mar 2014 09:24:57 CET
Source: tor
Binary: tor tor-dbg tor-geoipdb
Architecture: source all
Version: 0.2.5.3-alpha-1
Distribution: experimental
Urgency: low
Maintainer: Peter Palfrader <[email protected]>
Changed-By: Peter Palfrader <[email protected]>
Description:
tor - anonymizing overlay network for TCP
tor-dbg - debugging symbols for Tor
tor-geoipdb - GeoIP database for Tor
Closes: 739279
Changes:
tor (0.2.5.3-alpha-1) experimental; urgency=low
.
* New upstream version.
* Add obfsproxy to suggests.
* Apparmor policy: Allow executing /usr/bin/obfsproxy - thanks to
intrigeri for the patch (closes: #739279).
Checksums-Sha256:
4c5a9fca5e51badf57a448b64a4e0a16ce44b79e74783bfa13f95c605ac5d374 1730
tor_0.2.5.3-alpha-1.dsc
7dd9313a066e6d94131a07cf0a70ad1e8e3d92cbd752b1e1ca9baeb68a9bbd76 3039133
tor_0.2.5.3-alpha.orig.tar.gz
43cdb5282287fbd24d025a674909d714ff9338078a86b6d32f4d875dc0a94868 34267
tor_0.2.5.3-alpha-1.diff.gz
80baf22b409399e862754d6e7173e4b1fb6e60283499b57a6d709b84e9f8cb18 694238
tor-geoipdb_0.2.5.3-alpha-1_all.deb
Checksums-Sha1:
7d0bdeeda2c010b9340f92734deb8530912ef51e 1730 tor_0.2.5.3-alpha-1.dsc
29784b3f711780cd60fff076f6deb9b1f633fe5c 3039133 tor_0.2.5.3-alpha.orig.tar.gz
e063f80ea0ae0a581bcdc22eb303ab09f3febea5 34267 tor_0.2.5.3-alpha-1.diff.gz
200ff22461c1fb3533c2c601e14055ac3c796019 694238
tor-geoipdb_0.2.5.3-alpha-1_all.deb
Files:
74ea04ad26a74c712a77f993620363c1 1730 net optional tor_0.2.5.3-alpha-1.dsc
8714ea9ceaa7477534c88385edfdf7df 3039133 net optional
tor_0.2.5.3-alpha.orig.tar.gz
99e46e6f630df254c7bd2d4e40a06b85 34267 net optional tor_0.2.5.3-alpha-1.diff.gz
26a7d857f2021694a75437f70368a7df 694238 net extra
tor-geoipdb_0.2.5.3-alpha-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQEcBAEBCAAGBQJTLpp4AAoJEDTSCgbh3sV3N/8H/24DQBxfwt+iB3OUWDMDfFi0
y0XpKt4Yz1REBFFBl8clsDajx4i6kodOT1UtLSrgGN2Gyg45vmdNvccoOk7RPK2U
f2gdKg5wT89jvRIl910tr1+KNMfjVd7pZUJ4OSDoez/eOyLcqruK/e9O1jez4uGo
28BAMn8tUOzDTKbCtEMxuG8AAbQ37dRJzQxJPo26ilB+p6zFAGhw4ankvHBEt/Be
utpjiFByYD59ejrtIU/uAvfTJy8dqezEbOeqmChNxGlh6jj+e5ns0/kp/AtcVUkD
zZ70RMHtv7mKZSrLuY4WtP8SspLINSjzgxSCSNWhEvlRQWn/Efzw/DQiKoMi7sM=
=0NA4
-----END PGP SIGNATURE-----
--- End Message ---