Yes, we run /usr/bin/torbrowser unconfined. Tor Browser is still enforced.
Merged.
…
Minor.
Merged.
systemd AppArmorProfile= directive unavailable leads to not loading AppArmor profile on Debian jessie:
Any changes from
required in https://github.com/Whonix/apparmor-profile-torbrowser/blob/master/etc/apparmor.d/home.tor-browser.firefox?
1 Like
Following the last post from @iry and the issue regarding /etc/torrc.d, an update to apparmor-profile-whonixcheck, including /usr/local/etc/apparmor.d just in case.
Note.
After cloning my repository from github, I fetched and merged https://github.com/Whonix/apparmor-profile-whonixcheck, which is out of date. So I copied the installed profile in the package folder and then made the changes, hence the two commits.
2 Likes
apparmor-profile-whonixcheck does no longer exist. We integrated it into whonixcheck. (Please merge Whonix master please.)
That explains.
The same change in whonixcheck.
https://github.com/troubadoour/whonixcheck/commit/fb650ee096bf91aafdff994f20c39ae8a007b890
After installing the profile, whonixcheck does not complain after running anon-connection-wizard.
2 Likes
Merged. 
Are you sure the following is required?
/etc/ r,
/etc/torrc.d/ r,
/usr/local/etc/torrc.d/ r,
I speculate the following alone would do?
/etc/torrc.d/* rw,
/usr/local/etc/torrc.d/* rw,
Wondering because we had /etc/tor/** r, without /etc/ r, and it always worked.
1 Like