to change the owner of default.action to "privoxy" and the file is
editable again.
+- Debian package comes with an apparmor profile
+ /etc/apparmor.d/usr.sbin.privoxy, which restricts access to the
+ default paths. If you change something like the access rights of
+ default.action above, you may have to adapt the apparmor profile
+ accordingly and reload the new profile using
+ apparmor_parser -r /etc/apparmor.d/usr.sbin.privoxy
+ If you intend to run multiple instances of privoxy, you should place
+ all configuration in /etc/privoxy and use something matching
+ /run/privoxy*.pid as your PID file.
+
+
Roland Rosenfeld <roland@debian.org>
/etc/privoxy/** r,
owner /etc/privoxy/match-all.action rw,
owner /etc/privoxy/user.action rw,
- /run/privoxy.pid rw,
+ /run/privoxy*.pid rw,
/usr/share/doc/privoxy/user-manual/** r,
/usr/share/doc/privoxy/p_doc.css r,
owner /var/lib/privoxy/** rw,
-- Roland Rosenfeld <roland@debian.org> Thu, 25 Feb 2021 22:29:55 +0100
+privoxy (3.0.32-2) unstable; urgency=medium
+
+ * Work around apparmor failure in testsuite (Closes: #986258).
+ * apparmor: Allow multiple instances using /run/privoxy*.pid
+ * README.Debian: add information about apparmor.
+
+ -- Roland Rosenfeld <roland@debian.org> Sat, 03 Apr 2021 11:17:39 +0200
+
privoxy (3.0.32-1) unstable; urgency=medium
* New upstream release 3.0.32.
# Run privoxy-regression-test.pl on a configuration extended by
# regression-tests.action.
#
-# (c) 2018 Roland Rosenfeld <roland@debian.org>
+# (c) 2018-2021 Roland Rosenfeld <roland@debian.org>
PORT=8119
CONFIG=$AUTOPKGTEST_TMP/config
PIDFILE=$AUTOPKGTEST_TMP/privoxy.pid
+PRIVOXY=$AUTOPKGTEST_TMP/privoxy
+
sed -e "s/^listen-address.*/listen-address 127.0.0.1:$PORT/" \
-e "s%^logdir.*%logdir $AUTOPKGTEST_TMP%" \
-e "s/^enable-edit-actions.*/enable-edit-actions 1/" \
< /usr/share/privoxy/config > $CONFIG
echo "actionsfile regression-tests.action" >> $CONFIG
+cp /usr/sbin/privoxy $PRIVOXY
+
echo "Starting privoxy on port $PORT"
-/usr/sbin/privoxy --pidfile $PIDFILE $CONFIG
+$PRIVOXY --pidfile $PIDFILE $CONFIG
http_proxy=http://127.0.0.1:$PORT/
export http_proxy