[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [DONATE]

ricochet support

Add me one more time. I think the IDs change on app restart.

Current one: ricochet:rwck4bslnf73d5e6

1 Like

same result no way to connect through whonix to another whonix user.

@Patrick

Plain Debian to Whonix: Works

Whonix to Whonix: Not connecting

No onion-grater errors when looking at journalctl -u

1 Like

Did bot of you do the following?

Modify Whonix-Workstation ™ User Firewall Settings

sudo nano /etc/whonix_firewall.d/50_user.conf

Add.

EXTERNAL_OPEN_ALL=true

Save.

sudo whonix_firewall

I did of course. Can’t answer for him though.

1 Like

yes i did.

1 Like

Hello. Is gateway blocking whonix connections for ricochet? Can whonix users send messages to contacts who use other operating systems like debian?

ATM We have no idea what Whonix specific quirk is causing problems between 2 Whonix users contacting over Ricochet.

Yes

1 Like

AppArmor issue? Could you please check in Whonix-Workstation…?

sudo journalctl | grep DENIED

onion-grater issue? Any onion-grater filtered messages on Whonix-Gateway…?

sudo journalctl | grep filtered

Also worth starting ricochet-im with uwt verbose output…

uwtwrapper_verbose=1 ricochet-im

Does it use bindp? What does that output say about BIND_ADDR?

What is the output of…?

sudo /sbin/ifconfig "eth0" | grep -oP 'inet \K\S+'
1 Like

AppArmor issue? Could you please check in Whonix-Workstation…?

sudo journalctl | grep DENIED

No output returned.

onion-grater issue? Any onion-grater filtered messages on Whonix-Gateway…?

sudo journalctl | grep filtered

user@host:~$ sudo journalctl | grep filtered
May 28 16:15:32 host onion-grater[783]: 10.152.152.11:55180 (filter: 30_autogenerated): command filtered: setevents stream
May 28 16:15:32 host onion-grater[783]: 10.152.152.11:55180 (filter: 30_autogenerated): <- 510 Command filtered

Also worth starting ricochet-im with uwt verbose output…

uwtwrapper_verbose=1 ricochet-im

user@host:~$ uwtwrapper_verbose=1 ricochet
+ set -e
+ trap error_handler ERR
+ set -o pipefail
+ set -o errtrace
++ basename /usr/lib/uwtwrapper
+ SCRIPTNAME=uwtwrapper
+ preparation
+ declare -A -g timeprivacy
+ declare -A -g uwtwrapper
+ declare -A -g bindp_use
+ declare -A -g uwtport
+ source_config_folder
+ shopt -s nullglob
+ for i in /etc/uwt.d/*.conf /rw/config/uwt.d/*.conf
+ bash -n /etc/uwt.d/30_timeprivacy_default.conf
+ source /etc/uwt.d/30_timeprivacy_default.conf
++ timeprivacy_global=0
+ for i in /etc/uwt.d/*.conf /rw/config/uwt.d/*.conf
+ bash -n /etc/uwt.d/30_uwt_default.conf
+ source /etc/uwt.d/30_uwt_default.conf
++ uwtwrapper_global=1
+ parse_cmd
+ '[' '!' /usr/bin/ricochet = '' ']'
+ return 0
+ nested_protection
+ '[' -n '' ']'
+ uwtwrapper_max=10
+ '[' -n '' ']'
+ uwtwrapper_counter=0
+ uwtwrapper_counter=1
+ export uwtwrapper_counter
+ '[' 1 -ge 10 ']'
+ variables
+ '[' -n 1 ']'
+ export TORSOCKS_LOG_LEVEL
+ '[' -n '' ']'
+ torsocks_bin=torsocks
+ '[' -n '' ']'
+ uwtexec_bin=/usr/lib/uwtexec
+ '[' '' = 1 ']'
+ uwtwrapper_parent=/usr/bin/ricochet
+ '[' -n '' ']'
+ uwtwrapper_zeroarg=/usr/bin/ricochet
+ export uwtwrapper_zeroarg
+ true 'Let us see if uwtwrapper_parent /usr/bin/ricochet is actually a symlink.'
+ test -h /usr/bin/ricochet
+ true 'Yes, it is a symlink.'
+ local readlink_result
++ readlink /usr/bin/ricochet
+ readlink_result=ricochet.anondist
+ true 'Determine if /usr/bin/ricochet.anondist has a uwt wrapper script.'
+ '[' -e /usr/bin/ricochet.anondist ']'
+ true 'Yes, uwtwrapper_parent /usr/bin/ricochet has a uwt wrapper script.'
+ true 'Let us see if uwtwrapper_parent.anondist-orig /usr/bin/ricochet.anondist-orig is actually a symlink.'
+ test -h /usr/bin/ricochet.anondist-orig
+ true 'No, it is not a symlink.'
+ '[' -n 0 ']'
+ '[' -n 1 ']'
+ '[' -n '' ']'
+ bindp_use["/usr/bin/onionshare"]=true
+ '[' -n '' ']'
+ bindp_use["/usr/bin/onionshare-gui"]=true
+ '[' -n '' ']'
+ bindp_use["/usr/bin/ricochet"]=true
+ for bindp_use_item in "${!bindp_use[@]}"
+ '[' /usr/bin/ricochet = /usr/bin/onionshare ']'
+ for bindp_use_item in "${!bindp_use[@]}"
+ '[' /usr/bin/ricochet = /usr/bin/ricochet ']'
+ '[' true = true ']'
+ bindp_dispatch=true
+ break
+ alternatives_support
+ '[' '!' -e /usr/bin/ricochet.anondist-orig ']'
+ sanity_tests_general
+ '[' /usr/bin/ricochet = '' ']'
+ '[' '!' -e /usr/bin/ricochet.anondist-orig ']'
+ '[' '!' -x /usr/bin/ricochet.anondist-orig ']'
+ '[' true = true ']'
+ '[' -n '' ']'
+ bindp_so=/usr/lib/libindp.so
+ '[' -n '' ']'
+ bindp_interface=eth0
+ '[' -n '' ']'
++ grep -oP 'inet \K\S+'
++ /sbin/ifconfig eth0
+ BIND_ADDR=10.152.152.11
+ '[' -n 10.152.152.11 ']'
+ LD_PRELOAD+=' /usr/lib/libindp.so'
+ export BIND_ADDR
+ export LD_PRELOAD
+ exec /usr/lib/uwtexec
+ exec -a /usr/bin/ricochet /usr/bin/ricochet.anondist-orig
qrc:/ui/MainToolBar.qml:53:9: QML Text: Detected anchors on an item that is managed by a layout. This is undefined behavior; use Layout.alignment instead.
qrc:/ui/MainWindow.qml:89:17: QML Loader: Binding loop detected for property "active"
qrc:/ui/MainWindow.qml:89:17: QML Loader: Binding loop detected for property "active"

Does it use bindp? What does that output say about BIND_ADDR?

BIND_ADDR=10.152.152.11

What is the output of…?

sudo /sbin/ifconfig “eth0” | grep -oP ‘inet \K\S+’

10.152.152.11

1 Like

Strange, can’t think of what’s wrong. Even bindp is blessed functional since onionshare also requires it which is still functional in Whonix 15.

Just a guess but doesn’t the log show onion-grater filtered something?

1 Like

It could be but that could also be from Tor Browser.

To find out, please watch the log rather than just grep.

First…

sudo journalctl -f | grep -i filtered

Or…

sudo journalctl -f

Then watch the log while using ricochet. If it does not show filtered messages by then, it should be a non-issue.

1 Like
user@host:~$ sudo journalctl -f
[sudo] password for user:         
-- Logs begin at Wed 2019-05-29 17:45:53 UTC. --
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SAuqDf" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.NMIyED" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.pFagdd" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.dICiuQ" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.pSbWIf" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.oseYKZ" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.JTmORP" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.KtgTUR" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:03 host sudo[2711]:     user : TTY=pts/1 ; PWD=/home/user ; USER=root ; COMMAND=/bin/journalctl -f
May 29 18:10:03 host sudo[2711]: pam_unix(sudo:session): session opened for user root by (uid=0)
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/ricochet" name="/proc/sys/kernel/random/boot_id" pid=2713 comm="ricochet.anondi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
May 29 18:10:18 host kernel: kauditd_printk_skb: 36 callbacks suppressed
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.486:117): apparmor="DENIED" operation="open" profile="/usr/bin/ricochet" name="/proc/sys/kernel/random/boot_id" pid=2713 comm="ricochet.anondi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/37218bb997247a3d9413b1e6d06ab140b0a8c5fb.jsc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.630:118): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/37218bb997247a3d9413b1e6d06ab140b0a8c5fb.jsc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/f4b358902748182428c22ea1b63cd3c7f539b292.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.686:119): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/f4b358902748182428c22ea1b63cd3c7f539b292.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/277775a85741693101085c4ec0e434d8d1483d47.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.722:120): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/277775a85741693101085c4ec0e434d8d1483d47.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/a855986359df861ba218484ed1f7ce0d65b428c0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.754:121): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/a855986359df861ba218484ed1f7ce0d65b428c0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/e61a1fd243a18145bf4b063d34e883b7b2e978db.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.786:122): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/e61a1fd243a18145bf4b063d34e883b7b2e978db.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/6e7efd62740e52cabf3608ba39357f9882132b6d.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.826:123): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/6e7efd62740e52cabf3608ba39357f9882132b6d.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/eb6d1ce2cdba95126c257419348fcf1e169748e0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.858:124): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/eb6d1ce2cdba95126c257419348fcf1e169748e0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/9901237941a27c258fcd8daebeb606ad26b89a55.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.902:125): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/9901237941a27c258fcd8daebeb606ad26b89a55.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/97a420b217964e5e486a4796905bad2974d7382e.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.934:126): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/97a420b217964e5e486a4796905bad2974d7382e.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/619add67f62533e24c6bc8e51b75bc458b77580a.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/384f376e39890e30fce170c7c8662b93d7fd9bcc.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/4776091e9a082e459e6b410ae7c8019f4ac04e79.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/cd18e6a5226f78fc1d63231410cb321e72aaa98a.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SsWipI" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.RdocHV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.zWoOWF" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.kmWhvW" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SWHspG" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.JMlFDa" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.WTZShM" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.cuEYok" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.plzdsz" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.lAcvFQ" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.vciyqM" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.czlvLq" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.sNMWOx" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.vBidcU" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.veaSPf" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SALlfJ" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.CVomOA" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.DLurrl" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.bzKUey" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.BRkOxI" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.CElftk" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.EISJXG" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.FnpvHV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.QeTGrV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.GoVhWT" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.nGNHlc" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.gHnnLV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.ldeQNQ" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.nTmrqG" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SBSGKR" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.EePfyb" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.CusDHs" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
1 Like

Please try if this helps.

Installed updated apparmor pkg. Waiting for someone with the new setup to test with.

HulaHoop via Whonix Forum:

Installed updated apparmor pkg.

Not sure the package was already build and uploaded by that time.
Perhaps in the Whonix 15 developers repository. Usually if I don’t
notify package built and upload, can be assumed it’s not the case yet.
The longer there is no notification, the more likely it was done.

Did you verify that you have these changes on the disk?

Pushed to all Whonix 15 repositories now.

Waiting for someone with the new setup to test with.

Possible to test against yourself by using a second Whonix-Workstation?
That worked for me during development back then. That would eliminate
coordinating with someone else.

Upgraded apparmor profiles once again, tested on cloned setup. Doesn’t work. Checked apparmor status with aa-status: Ricochet not even enforced. Apparmor not the culprit.

1 Like

The only explanation left is onion-grater is not passing something thru related to adding contacts.

1 Like

How do I disable onion-grater filtering altogether and see if it will work? Just to see if we are looking in the right place.

All Tor related commands are in these files in case you can easily notice what we miss out on.

1 Like
[Imprint] [Privacy Policy] [Cookie Policy] [Terms of Use] [E-Sign Consent] [DMCA] [Investors] [Priority Support] [Professional Support]