#1152629 torbrowser-launcher: apparmor 5.0 breaks portals and --allow-remote usage

#1152629#5
Date:
2026-10-30 19:14:01 UTC
From:
To:
Hey,

with apparmor 5.0 the dbus interface is more stricly handled and that
breaks my --allow-remote usage. I use Tor Browser as default browser and
that's why I want to open urls from the outside.
There for Tor Birwser needs to be started with --allow-remote and that
creates a dbus interface. And also Tor Browser upstream wants to support
this usage:
https://gitlab.torproject.org/tpo/applications/tor-browser/-/work_items/42595

Additionally I find it useful, if Tor Browser can use portals, as I like
to have a nice integration with my Desktop Environment.

I can fully unterstand that enable the remote is dangerous, so maybe we can ship a
apparmor.d/local/torbrowser.Browser.firefox.allow-remote
that a user can simple include in
apparmor.d/local/torbrowser.Browser.firefox

Regards,

hefee

Patch: the added dbus lines in
/etc/apparmor.d/torbrowser.Browser.firefox