500 internal server error on instance config page due to missing AppArmor rule

[redshiftzero]

Description

I went to the new "Instance Config" page and got a 500 internal server error due to a missing AppArmor rule.

Steps to Reproduce

0. Install 0.5.1-rc1 on prod VMs
1. Create an administrator account.
2. Click on "Instance Config" in the admin interface:

Expected Behavior

You go to the instance config page and all is merry and well.

Actual Behavior

Comments

A peek at the logs reveals the culprit:

[Thu Jan 11 02:38:16.105986 2018] [:error] [pid 3754:tid 2943491983104] [remote 127.0.0.1:51806] IOError: [Errno 13] Permission denied: '/var/www/securedrop/journalist_templates/config.html'

Updating the AppArmor profile for Apache will fix this.

[redshiftzero]

I'm surprised that CI didn't catch this, since there were unit and functional tests for this feature that will pass in the development environment due to the lack of AppArmor, but should fail in staging..

[ghost]

I'm surprised that CI didn't catch this

Ouch, it means something is broken in the CI :-(

[kushaldas]

I can also verify the bug.

[redshiftzero]

Closed by #2828