Hey,
with apparmor 5.0 the dbus interface is more stricly handled and that
breaks my --allow-remote usage. I use Tor Browser as default browser and
that's why I want to open urls from the outside.
There for Tor Birwser needs to be started with --allow-remote and that
creates a dbus interface. And also Tor Browser upstream wants to support
this usage:
https://gitlab.torproject.org/tpo/applications/tor-browser/-/work_items/42595
Additionally I find it useful, if Tor Browser can use portals, as I like
to have a nice integration with my Desktop Environment.
I can fully unterstand that enable the remote is dangerous, so maybe we can ship a
apparmor.d/local/torbrowser.Browser.firefox.allow-remote
that a user can simple include in
apparmor.d/local/torbrowser.Browser.firefox
Regards,
hefee
Patch: the added dbus lines in
/etc/apparmor.d/torbrowser.Browser.firefox