From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001
From: Lukasz Kasprzak <lukasz.kasprzak@pm.me>
Date: Fri, 20 Mar 2026 19:16:32 +0100
Subject: feat: first fully successful run e2e on straper

---
 .../db/public/apparmor/apparmor.d/abstractions/tor | 33 ++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/tor

(limited to 'straper/db/public/apparmor/apparmor.d/abstractions/tor')

diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/tor b/straper/db/public/apparmor/apparmor.d/abstractions/tor
new file mode 100644
index 0000000..0b6c08e
--- /dev/null
+++ b/straper/db/public/apparmor/apparmor.d/abstractions/tor
@@ -0,0 +1,33 @@
+# vim:syntax=apparmor
+
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+  #include <abstractions/openssl>
+
+  network tcp,
+  network udp,
+
+  capability chown,
+  capability dac_read_search,
+  capability fowner,
+  capability fsetid,
+  capability setgid,
+  capability setuid,
+
+  /usr/bin/tor r,
+  /usr/sbin/tor r,
+
+  # Needed by obfs4proxy
+  /proc/sys/net/core/somaxconn r,
+
+  /proc/sys/kernel/random/uuid r,
+  /sys/devices/system/cpu/ r,
+  /sys/devices/system/cpu/** r,
+
+  /etc/tor/* r,
+  /usr/share/tor/** r,
+
+  /usr/bin/obfsproxy PUx,
+  /usr/bin/obfs4proxy Pix,
+
+  /usr/bin/snowflake-client Pix,
-- 
cgit v1.3