[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #8368 [Tor]: Add tor.service (for systemd) to upstream package
#8368: Add tor.service (for systemd) to upstream package
-----------------------------+-------------------------------------------
Reporter: jamielinux | Owner:
Type: enhancement | Status: needs_review
Priority: normal | Milestone: Tor: 0.2.5.x-final
Component: Tor | Version:
Resolution: | Keywords: tor-relay systemd 025-triaged
Actual Points: | Parent ID:
Points: |
-----------------------------+-------------------------------------------
Comment (by jamielinux):
I've attached an improved patch with some saner defaults.
I've removed --quiet, which was a remnant from the previous packager. I
should have noticed and removed this sooner. I've also removed
--runasdaemon 0, as 0 is the default. Specifying it is useless and
overrides the user. As misc suggested, I've replaced ExecStop with
KillSignal.
The hardening options are optional but provide some simple restrictions
that add a layer of protection.
The V2 patch also restricted read-only/read-write access to certain
directories, but this is dependent on where the "DataDirectory" and "log
debug file" locations are, so I've removed them in the V3 patch.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8368#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs