Whonix AppArmor Profiles Development Discussion

In Qubes /usr/local is a symlink to /rw/usrlocal/. Due to apparmor-profile-dist/qubes-whonix-anondist at master · Kicksecure/apparmor-profile-dist · GitHub shipping

alias /usr/local -> /rw/usrlocal/,

we don’t have to care about this a lot. Only note, if a user posts a denied message

/rw/usrlocal/share/applications/meminfo.cache

Then the one added to the AppArmor profile should be.

/usr/local/share/applications/meminfo.cache

So it will work for non-Qubes users as well.

apparmor-woes, can you please try test adding.

/usr/local/share/applications/meminfo.cache r,

to the profile and report if that fixes the denied message?