Skip to content

/run/tor/control.txt AppArmor profile rules missing

Debian bookworm with Tor version 0.4.8.11-1~d12.bookworm+1 from deb.torproject.org.

error message in journal:

AVC apparmor="DENIED" operation="mknod" profile="system_tor" name="/run/tor/control.txt.tmp" comm="tor" requested_mask="c" denied_mask="c"

As a result, file /run/tor/control.txt is empty.

The following AppArmor rules are missing in the /etc/apparmor.d/system_tor AppArmor profile.

/run/tor/control.txt rw,
/run/tor/control.txt.tmp rw,

After adding these AppArmor rules followed by sudo aa-enforce /etc/apparmor.d/system_tor this issue is fixed and file /run/tor/control.txtgets properly populated.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information