root
8d303d2bbe
Packages with configuration changes: +tor 0.4.5.10-1~deb11u1 amd64 +torbrowser-launcher 0.3.5-2 amd64 +torsocks 2.3.0-3 amd64 Package changes: +libdouble-conversion3 3.1.5-6.1 amd64 +libmd4c0 0.4.7-2 amd64 +libpcre2-16-0 10.36-2 amd64 +libqt5core5a 5.15.2+dfsg-9 amd64 +libqt5dbus5 5.15.2+dfsg-9 amd64 +libqt5designer5 5.15.2-5 amd64 +libqt5gui5 5.15.2+dfsg-9 amd64 +libqt5help5 5.15.2-5 amd64 +libqt5network5 5.15.2+dfsg-9 amd64 +libqt5printsupport5 5.15.2+dfsg-9 amd64 +libqt5sql5 5.15.2+dfsg-9 amd64 +libqt5sql5-sqlite 5.15.2+dfsg-9 amd64 +libqt5svg5 5.15.2-3 amd64 +libqt5test5 5.15.2+dfsg-9 amd64 +libqt5widgets5 5.15.2+dfsg-9 amd64 +libqt5xml5 5.15.2+dfsg-9 amd64 +libxcb-icccm4 0.4.1-1.1 amd64 +libxcb-image0 0.4.0-1+b3 amd64 +libxcb-keysyms1 0.4.0-1+b2 amd64 +libxcb-render-util0 0.3.9-1+b1 amd64 +libxcb-xinerama0 1.14-3 amd64 +libxcb-xinput0 1.14-3 amd64 +libxcb-xkb1 1.14-3 amd64 +libxkbcommon-x11-0 1.0.3-2 amd64 +python3-packaging 20.9-2 all +python3-pyparsing 2.4.7-1 all +python3-pyqt5 5.15.2+dfsg-3 amd64 +python3-pyqt5.sip 12.8.1-1+b2 amd64 +python3-socks 1.7.1+dfsg-1 all +qt5-gtk-platformtheme 5.15.2+dfsg-9 amd64 +qttranslations5-l10n 5.15.2-2 all +tor 0.4.5.10-1~deb11u1 amd64 +tor-geoipdb 0.4.5.10-1~deb11u1 all +torbrowser-launcher 0.3.5-2 amd64 +torsocks 2.3.0-3 amd64
26 lines
684 B
Plaintext
26 lines
684 B
Plaintext
# vim:syntax=apparmor
|
|
#include <tunables/global>
|
|
|
|
profile system_tor flags=(attach_disconnected) {
|
|
#include <abstractions/tor>
|
|
|
|
owner /var/lib/tor/** rwk,
|
|
owner /var/lib/tor/ r,
|
|
owner /var/log/tor/* w,
|
|
|
|
# During startup, tor (as root) tries to open various things such as
|
|
# directories via check_private_dir(). Let it.
|
|
/var/lib/tor/** r,
|
|
|
|
/{,var/}run/tor/ r,
|
|
/{,var/}run/tor/control w,
|
|
/{,var/}run/tor/socks w,
|
|
/{,var/}run/tor/tor.pid w,
|
|
/{,var/}run/tor/control.authcookie w,
|
|
/{,var/}run/tor/control.authcookie.tmp rw,
|
|
/{,var/}run/systemd/notify w,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
#include <local/system_tor>
|
|
}
|