fix tor-controlport-filter AppArmor profile

[phabricator-migrator]

Information

ID: 587
PHID: PHID-TASK-lgpke6rjdui7mqy4xx2t
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

Since we ported to tor-controlport-filter it needs to be renamed and fixed.

https://github.com/Whonix/control-port-filter-python/blob/master/etc/apparmor.d/usr.sbin.cpfpd

Comments

---

joysn1980

2017-01-12 09:40:16 UTC

Renaming done
control-port-filter-python/etc/apparmor.d at master · joysn/control-port-filter-python · GitHub
renaming usr.sbin.cpfpd to usr.lib.tor-controlport-filter · joysn/control-port-filter-python@3685f36 · GitHub

---

joysn1980

2017-01-12 11:06:11 UTC

Changes to the security profile
control-port-filter-python/etc/apparmor.d/usr.lib.tor-controlport-filter at master · joysn/control-port-filter-python · GitHub
Modify the tor-controlport-filter profile for apparmor.d · joysn/control-port-filter-python@34070b3 · GitHub

The changes done in this merge should be harmless (more of a grep and replace), the obvious ones. Tested and nothing broke with these changes.
More changes (stricter profile) may be required after more testing.

---

Patrick

2017-01-12 21:38:12 UTC

Nice! Tested and merged.

Btw, please also consider…

sudo apt-get install apparmor-notify

and/or

grep -i denied /var/log/syslog