Silence the deny apparmor log from lsb_release

This resolves debian bug: https://bugs.debian.org/913104

lsb_release is only used by Firefox to add extra information to crash reports,
and Tor Browser is built with --disable-crashreporter.

Therefore, AppArmor denying execution of lsb_release should be a no-op,
and we can silence the corresponding log message.
This commit is contained in:
Roger Shimizu 2020-04-12 16:02:51 +09:00 committed by intrigeri
parent fc2073de09
commit e71d63bca4

View File

@ -122,6 +122,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
deny /sys/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
deny /run/user/[0-9]*/dconf/user rw,
deny /usr/bin/lsb_release x,
# Silence denial logs about PulseAudio
deny /etc/pulse/client.conf r,