[Pkg-anonymity-tools] Bug#803171: torbrowser-launcher: AppArmor profiles broken with latest Tor Browser

[intrigeri]

Control: tag -1 - moreinfo
Control: retitle -1 Some of the included (but disabled by default) AppArmor profiles are broken
Control: severity -1 minor
Control: tag -1 + upstream

Hi,

Kjö Hansi Glaz wrote (28 Oct 2015 18:36:01 GMT) :
> intrigeri:
>> does the package work for you if you *don't* manually set to enforce
>> mode the profiles we intentionally have set to complain mode in
>> the packaging?
>> 
> Yes, it works then.

Thanks for confirming! I'm adjusting the bug's metadata accordingly.

> However, I find it surprising that there is an apparmor profile shipped
> in the package and that its failures are expected.

I completely agree that the situation is not optimal. FYI that other bug
report might help alleviate your surprise: https://bugs.debian.org/796295

> Perhaps they should be dropped, [...]

It's been done for start-tor-browser upstream already:
https://github.com/micahflee/torbrowser-launcher/commit/39901c6ddc05bb96f2d14cebefec515c2009a222

But I was mistaken wrt. usr.bin.torbrowser-launcher: there's no plan
to drop it upstream apparently, so indeed it's a very good idea to
contribute fixes there so that we can re-enable this profile some day
in Debian :)

Cheers,
-- 
intrigeri