[Tor-BSD] FreeBSD permissions issues

Pete Wright pete at nomadlogic.org
Tue Nov 17 17:23:13 EST 2015



On 11/17/15 14:14, N.J. Thomas wrote:
> I noticed that when tor or tor-devel is installed on FreeBSD (on 10.2
> boxes), I need to do the following to make it work:
> 
>     sudo touch /var/log/tor
>     sudo mkdir /var/run/tor
>     sudo chown _tor:_tor /var/log/tor
>     sudo chown _tor:_tor /var/run/tor
> 
> Without /var/log/tor, nothing runs. Without /var/run/tor, the pid file
> is not written, so "service tor status" and its brethren don't think
> anything is running.
> 
> Has anyone else noticed the same? Am I doing something wrong with my
> install, or does this need to be fixed?
> 

on my end this info is already included in the pkg-message.in file which
should get printed to stdout when installing the pkg.  here's the
contents of this file on my workstation:

> cat /usr/ports/security/tor-devel/files/pkg-message.in
================================================================================
To enable the tor server, set tor_enable="YES" in your /etc/rc.conf
and edit %%PREFIX%%/etc/tor/torrc as desired. (However, note that the
%%PREFIX%%/etc/rc.d/tor rc.subr script can override some torrc
options: see that script for details.) To use the torify script, install
the net/torsocks port. After installing tor for the first time, or after
a major update of tor, you should:

rm -r /var/db/tor /var/run/tor
mkdir -p /var/db/tor/data /var/run/tor
touch /var/log/tor
chown -R _tor:_tor /var/db/tor /var/log/tor /var/run/tor
chmod -R 700 /var/db/tor

before starting the tor server. Tor users are strongly advised to
prevent traffic
analysis that exploits sequential IP IDs by setting:

sysctl net.inet.ip.random_id=1

(see sysctl.conf(5)).
================================================================================


cheers,
-pete

-- 
Pete Wright
pete at nomadlogic.org
twitter => @nomadlogicLA



More information about the Tor-BSD mailing list