From: Roger Shimizu <rosh@debian.org>
Date: Sun, 12 Apr 2020 07:02:51 +0000 (+0900)
Subject: Silence the deny apparmor log from lsb_release
X-Git-Url: https://git.lizzy.rs/?a=commitdiff_plain;h=e71d63bca4b321ff5906558c51515592acb30919;p=torbrowser-launcher.git

Silence the deny apparmor log from lsb_release

This resolves debian bug: https://bugs.debian.org/913104

lsb_release is only used by Firefox to add extra information to crash reports,
and Tor Browser is built with --disable-crashreporter.

Therefore, AppArmor denying execution of lsb_release should be a no-op,
and we can silence the corresponding log message.
---

diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
index 1266476..e7ebddc 100644
--- a/apparmor/torbrowser.Browser.firefox
+++ b/apparmor/torbrowser.Browser.firefox
@@ -122,6 +122,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
   deny /sys/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
   deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
   deny /run/user/[0-9]*/dconf/user rw,
+  deny /usr/bin/lsb_release x,
 
   # Silence denial logs about PulseAudio
   deny /etc/pulse/client.conf r,