Apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browse

AppArmor
1

i was trying some alternatives to IDM (internet download manager) for linux , and i have found this one:-

http://ugetdm.com/downloads-debian

if u c , it has a plugin called aria2 , and i have installed it. but when i want to download any file the following messages going to appear (because of that plugin i think).

May 15 11:06:16 host kernel: [ 6319.971341] type=1400 audit(1431687976.574:12): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/tmp/orcexec.tHGx2N" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000

May 15 11:06:16 host kernel: [ 6319.971491] type=1400 audit(1431687976.574:13): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/home/user/tor-browser_en-US/Browser/orcexec.UODYTr" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000

May 15 11:06:19 host kernel: [ 6322.702469] type=1400 audit(1431687979.306:14): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/tmp/orcexec.Y15S0O" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000

May 15 11:06:19 host kernel: [ 6322.702555] type=1400 audit(1431687979.306:15): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/home/user/tor-browser_en-US/Browser/orcexec.y75G8b" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000

May 15 11:06:19 host kernel: [ 6323.022460] type=1400 audit(1431687979.626:16): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/usr/lib/i386-linux-gnu/libvisual-0.4/actor/actor_bumpscope.so" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

May 15 11:06:19 host kernel: [ 6323.030010] type=1400 audit(1431687979.634:17): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/usr/lib/i386-linux-gnu/libvisual-0.4/actor/actor_corona.so" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

May 15 11:06:19 host kernel: [ 6323.030440] type=1400 audit(1431687979.634:18): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/usr/lib/i386-linux-gnu/libvisual-0.4/actor/actor_flower.so" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

May 15 11:06:19 host kernel: [ 6323.030896] type=1400 audit(1431687979.634:19): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/usr/lib/i386-linux-gnu/libvisual-0.4/actor/actor_infinite.so" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

May 15 11:06:19 host kernel: [ 6323.031615] type=1400 audit(1431687979.634:20): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/usr/lib/i386-linux-gnu/libvisual-0.4/actor/actor_jakdaw.so" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

May 15 11:06:19 host kernel: [ 6323.031929] type=1400 audit(1431687979.634:21): apparmor="DENIED" operation="file_mmap" parent=13380 profile="/home/*/tor-browser_*/Browser/firefox" name="/usr/lib/i386-linux-gnu/libvisual-0.4/actor/actor_JESS.so" pid=13425 comm="gst-plugin-scan" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

what i want from this report is , thats what will it give if someone trying to install some outside plugins into the browser (in case someone had the same problem/messages in the future). :wink:

2

What do you want to use a download manager for? Is it for resuming, or for accelerating the download, or both? If it’s the former, you could use

It’s safe in Whonix, as everything is torified.

For the latter, I am not sure an accelerator would have much effect with Tor. Patrick could confirm, or disprove.

It’s generally not a good idea to install other plugins than the default ones in Tor Browser, as they might compromise anonymity. And probably not a good idea too, to extend the profile for such use. Pushing the logic, if users are willing to take the risks doing so, they might as well disable AppArmor for the Tor Browser.

3

yes , ur correct with no doubt. im just testing what will happen if i do this or that and give the feedback. i think it will be useful for the future reports uses (if someone had the same trail). :slight_smile: