ricochet support

HulaHoop · April 26, 2019, 5:50pm

Add me one more time. I think the IDs change on app restart.

Current one: ricochet:rwck4bslnf73d5e6

nurmagoz · April 26, 2019, 5:55pm

same result no way to connect through whonix to another whonix user.

HulaHoop · April 26, 2019, 5:59pm

@Patrick

Plain Debian to Whonix: Works

Whonix to Whonix: Not connecting

No onion-grater errors when looking at journalctl -u

Patrick · April 26, 2019, 9:09pm

Did bot of you do the following?

Modify Whonix-Workstation ™ User Firewall Settings

sudo nano /etc/whonix_firewall.d/50_user.conf

Add.

EXTERNAL_OPEN_ALL=true

Save.

sudo whonix_firewall

HulaHoop · April 26, 2019, 10:45pm

I did of course. Can’t answer for him though.

nurmagoz · April 29, 2019, 4:22pm

yes i did.

AlfredG · May 1, 2019, 1:38pm

Hello. Is gateway blocking whonix connections for ricochet? Can whonix users send messages to contacts who use other operating systems like debian?

HulaHoop · May 1, 2019, 4:20pm

ATM We have no idea what Whonix specific quirk is causing problems between 2 Whonix users contacting over Ricochet.

Yes

Patrick · May 27, 2019, 10:58pm

AppArmor issue? Could you please check in Whonix-Workstation…?

sudo journalctl | grep DENIED

onion-grater issue? Any onion-grater filtered messages on Whonix-Gateway…?

sudo journalctl | grep filtered

Also worth starting ricochet-im with uwt verbose output…

uwtwrapper_verbose=1 ricochet-im

Does it use bindp? What does that output say about BIND_ADDR?

What is the output of…?

sudo /sbin/ifconfig "eth0" | grep -oP 'inet \K\S+'

HulaHoop · May 28, 2019, 4:28pm

AppArmor issue? Could you please check in Whonix-Workstation…?

sudo journalctl | grep DENIED

No output returned.

onion-grater issue? Any onion-grater filtered messages on Whonix-Gateway…?

sudo journalctl | grep filtered

user@host:~$ sudo journalctl | grep filtered
May 28 16:15:32 host onion-grater[783]: 10.152.152.11:55180 (filter: 30_autogenerated): command filtered: setevents stream
May 28 16:15:32 host onion-grater[783]: 10.152.152.11:55180 (filter: 30_autogenerated): ← 510 Command filtered

Also worth starting ricochet-im with uwt verbose output…

uwtwrapper_verbose=1 ricochet-im

user@host:~$ uwtwrapper_verbose=1 ricochet
+ set -e
+ trap error_handler ERR
+ set -o pipefail
+ set -o errtrace
++ basename /usr/lib/uwtwrapper
+ SCRIPTNAME=uwtwrapper
+ preparation
+ declare -A -g timeprivacy
+ declare -A -g uwtwrapper
+ declare -A -g bindp_use
+ declare -A -g uwtport
+ source_config_folder
+ shopt -s nullglob
+ for i in /etc/uwt.d/*.conf /rw/config/uwt.d/*.conf
+ bash -n /etc/uwt.d/30_timeprivacy_default.conf
+ source /etc/uwt.d/30_timeprivacy_default.conf
++ timeprivacy_global=0
+ for i in /etc/uwt.d/*.conf /rw/config/uwt.d/*.conf
+ bash -n /etc/uwt.d/30_uwt_default.conf
+ source /etc/uwt.d/30_uwt_default.conf
++ uwtwrapper_global=1
+ parse_cmd
+ '[' '!' /usr/bin/ricochet = '' ']'
+ return 0
+ nested_protection
+ '[' -n '' ']'
+ uwtwrapper_max=10
+ '[' -n '' ']'
+ uwtwrapper_counter=0
+ uwtwrapper_counter=1
+ export uwtwrapper_counter
+ '[' 1 -ge 10 ']'
+ variables
+ '[' -n 1 ']'
+ export TORSOCKS_LOG_LEVEL
+ '[' -n '' ']'
+ torsocks_bin=torsocks
+ '[' -n '' ']'
+ uwtexec_bin=/usr/lib/uwtexec
+ '[' '' = 1 ']'
+ uwtwrapper_parent=/usr/bin/ricochet
+ '[' -n '' ']'
+ uwtwrapper_zeroarg=/usr/bin/ricochet
+ export uwtwrapper_zeroarg
+ true 'Let us see if uwtwrapper_parent /usr/bin/ricochet is actually a symlink.'
+ test -h /usr/bin/ricochet
+ true 'Yes, it is a symlink.'
+ local readlink_result
++ readlink /usr/bin/ricochet
+ readlink_result=ricochet.anondist
+ true 'Determine if /usr/bin/ricochet.anondist has a uwt wrapper script.'
+ '[' -e /usr/bin/ricochet.anondist ']'
+ true 'Yes, uwtwrapper_parent /usr/bin/ricochet has a uwt wrapper script.'
+ true 'Let us see if uwtwrapper_parent.anondist-orig /usr/bin/ricochet.anondist-orig is actually a symlink.'
+ test -h /usr/bin/ricochet.anondist-orig
+ true 'No, it is not a symlink.'
+ '[' -n 0 ']'
+ '[' -n 1 ']'
+ '[' -n '' ']'
+ bindp_use["/usr/bin/onionshare"]=true
+ '[' -n '' ']'
+ bindp_use["/usr/bin/onionshare-gui"]=true
+ '[' -n '' ']'
+ bindp_use["/usr/bin/ricochet"]=true
+ for bindp_use_item in "${!bindp_use[@]}"
+ '[' /usr/bin/ricochet = /usr/bin/onionshare ']'
+ for bindp_use_item in "${!bindp_use[@]}"
+ '[' /usr/bin/ricochet = /usr/bin/ricochet ']'
+ '[' true = true ']'
+ bindp_dispatch=true
+ break
+ alternatives_support
+ '[' '!' -e /usr/bin/ricochet.anondist-orig ']'
+ sanity_tests_general
+ '[' /usr/bin/ricochet = '' ']'
+ '[' '!' -e /usr/bin/ricochet.anondist-orig ']'
+ '[' '!' -x /usr/bin/ricochet.anondist-orig ']'
+ '[' true = true ']'
+ '[' -n '' ']'
+ bindp_so=/usr/lib/libindp.so
+ '[' -n '' ']'
+ bindp_interface=eth0
+ '[' -n '' ']'
++ grep -oP 'inet \K\S+'
++ /sbin/ifconfig eth0
+ BIND_ADDR=10.152.152.11
+ '[' -n 10.152.152.11 ']'
+ LD_PRELOAD+=' /usr/lib/libindp.so'
+ export BIND_ADDR
+ export LD_PRELOAD
+ exec /usr/lib/uwtexec
+ exec -a /usr/bin/ricochet /usr/bin/ricochet.anondist-orig
qrc:/ui/MainToolBar.qml:53:9: QML Text: Detected anchors on an item that is managed by a layout. This is undefined behavior; use Layout.alignment instead.
qrc:/ui/MainWindow.qml:89:17: QML Loader: Binding loop detected for property "active"
qrc:/ui/MainWindow.qml:89:17: QML Loader: Binding loop detected for property "active"

Does it use bindp? What does that output say about BIND_ADDR?

BIND_ADDR=10.152.152.11

What is the output of…?

sudo /sbin/ifconfig “eth0” | grep -oP ‘inet \K\S+’

10.152.152.11

Patrick · May 29, 2019, 9:59am

Strange, can’t think of what’s wrong. Even bindp is blessed functional since onionshare also requires it which is still functional in Whonix 15.

HulaHoop · May 29, 2019, 6:22pm

Just a guess but doesn’t the log show onion-grater filtered something?

Patrick · May 29, 2019, 6:23pm

It could be but that could also be from Tor Browser.

To find out, please watch the log rather than just grep.

First…

sudo journalctl -f | grep -i filtered

Or…

sudo journalctl -f

Then watch the log while using ricochet. If it does not show filtered messages by then, it should be a non-issue.

HulaHoop · May 29, 2019, 6:33pm

user@host:~$ sudo journalctl -f
[sudo] password for user:         
-- Logs begin at Wed 2019-05-29 17:45:53 UTC. --
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SAuqDf" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.NMIyED" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.pFagdd" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.dICiuQ" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.pSbWIf" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.oseYKZ" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.JTmORP" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:09:41 host audit[2689]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.KtgTUR" pid=2689 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:03 host sudo[2711]:     user : TTY=pts/1 ; PWD=/home/user ; USER=root ; COMMAND=/bin/journalctl -f
May 29 18:10:03 host sudo[2711]: pam_unix(sudo:session): session opened for user root by (uid=0)
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/ricochet" name="/proc/sys/kernel/random/boot_id" pid=2713 comm="ricochet.anondi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
May 29 18:10:18 host kernel: kauditd_printk_skb: 36 callbacks suppressed
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.486:117): apparmor="DENIED" operation="open" profile="/usr/bin/ricochet" name="/proc/sys/kernel/random/boot_id" pid=2713 comm="ricochet.anondi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/37218bb997247a3d9413b1e6d06ab140b0a8c5fb.jsc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.630:118): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/37218bb997247a3d9413b1e6d06ab140b0a8c5fb.jsc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/f4b358902748182428c22ea1b63cd3c7f539b292.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.686:119): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/f4b358902748182428c22ea1b63cd3c7f539b292.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/277775a85741693101085c4ec0e434d8d1483d47.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.722:120): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/277775a85741693101085c4ec0e434d8d1483d47.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/a855986359df861ba218484ed1f7ce0d65b428c0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.754:121): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/a855986359df861ba218484ed1f7ce0d65b428c0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/e61a1fd243a18145bf4b063d34e883b7b2e978db.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.786:122): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/e61a1fd243a18145bf4b063d34e883b7b2e978db.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/6e7efd62740e52cabf3608ba39357f9882132b6d.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.826:123): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/6e7efd62740e52cabf3608ba39357f9882132b6d.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/eb6d1ce2cdba95126c257419348fcf1e169748e0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.858:124): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/eb6d1ce2cdba95126c257419348fcf1e169748e0.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/9901237941a27c258fcd8daebeb606ad26b89a55.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.902:125): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/9901237941a27c258fcd8daebeb606ad26b89a55.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/97a420b217964e5e486a4796905bad2974d7382e.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host kernel: audit: type=1400 audit(1559153418.934:126): apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/97a420b217964e5e486a4796905bad2974d7382e.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:18 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/619add67f62533e24c6bc8e51b75bc458b77580a.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/384f376e39890e30fce170c7c8662b93d7fd9bcc.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/4776091e9a082e459e6b410ae7c8019f4ac04e79.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.cache/Ricochet/ricochet/qmlcache/cd18e6a5226f78fc1d63231410cb321e72aaa98a.qmlc" pid=2713 comm="QQmlThread" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.cache/Ricochet/ricochet/qmlcache/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SsWipI" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.RdocHV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.zWoOWF" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.kmWhvW" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SWHspG" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.JMlFDa" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.WTZShM" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.cuEYok" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.plzdsz" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.lAcvFQ" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.vciyqM" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.czlvLq" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.sNMWOx" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.vBidcU" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.veaSPf" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SALlfJ" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.CVomOA" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.DLurrl" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.bzKUey" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.BRkOxI" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.CElftk" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.EISJXG" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.FnpvHV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.QeTGrV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.GoVhWT" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.nGNHlc" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.gHnnLV" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.ldeQNQ" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.nTmrqG" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.SBSGKR" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.EePfyb" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"
May 29 18:10:19 host audit[2713]: AVC apparmor="DENIED" operation="link" profile="/usr/bin/ricochet" name="/home/user/.local/share/Ricochet/ricochet/ricochet.json.CusDHs" pid=2713 comm="ricochet.anondi" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/user/.local/share/Ricochet/ricochet/#3802712"

Patrick · June 1, 2019, 9:08am

Please try if this helps.

HulaHoop · June 1, 2019, 2:52pm

Installed updated apparmor pkg. Waiting for someone with the new setup to test with.

Patrick · June 1, 2019, 4:51pm

HulaHoop via Whonix Forum:

Installed updated apparmor pkg.

Not sure the package was already build and uploaded by that time.
Perhaps in the Whonix 15 developers repository. Usually if I don’t
notify package built and upload, can be assumed it’s not the case yet.
The longer there is no notification, the more likely it was done.

Did you verify that you have these changes on the disk?

Pushed to all Whonix 15 repositories now.

Waiting for someone with the new setup to test with.

Possible to test against yourself by using a second Whonix-Workstation?
That worked for me during development back then. That would eliminate
coordinating with someone else.

HulaHoop · June 1, 2019, 9:00pm

Upgraded apparmor profiles once again, tested on cloned setup. Doesn’t work. Checked apparmor status with aa-status: Ricochet not even enforced. Apparmor not the culprit.

HulaHoop · June 1, 2019, 11:08pm

The only explanation left is onion-grater is not passing something thru related to adding contacts.

HulaHoop · June 2, 2019, 6:23pm

How do I disable onion-grater filtering altogether and see if it will work? Just to see if we are looking in the right place.

All Tor related commands are in these files in case you can easily notice what we miss out on.

ricochet/src/tor at master · ricochet-im/ricochet · GitHub