[tor-bugs] #6996 [Obfsproxy]: Problems with starting managed Obfsproxy server when installed via debian package and with Tor as service

[Tor Bug Tracker & Wiki]

#6996: Problems with starting managed Obfsproxy server when installed via debian
package and with Tor as service
-----------------------+----------------------------------------------------
 Reporter:  linda      |          Owner:  asn             
     Type:  defect     |         Status:  new             
 Priority:  normal     |      Milestone:                  
Component:  Obfsproxy  |        Version:  Tor: 0.2.3.22-rc
 Keywords:             |         Parent:                  
   Points:             |   Actualpoints:                  
-----------------------+----------------------------------------------------

Comment(by Christian):

 @Linda, I think I have the same issue here:

 When I start tor via the initscript, I get the same error:

 {{{
   Could not launch managed proxy executable at '/usr/bin/obfsproxy'
 ('Permission denied')
 }}}

 When I start tor manually via the commandline, it works. I too am using
 Ubuntu 12.04.1 LTS and in the system log I just found:

 {{{
 type=1400 audit(1352141151.479:26): apparmor="DENIED" operation="exec"
 parent=21625 profile="system_tor" \
 name="/usr/bin/obfsproxy" pid=21628 comm="tor" requested_mask="x"
 denied_mask="x" fsuid=106 ouid=0
 }}}

 So it's AppArmor playing games here and somehow we must alter the policy
 to allow obfsproxy be started by the init-script. I'm not AppArmor savvy
 (yet), but that's the way to go, I suppose. Maybe you see these AppArmor
 messages too in your logs?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6996#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online