[Tor-BSD] FreeBSD permissions issues
Pete Wright
pete at nomadlogic.org
Tue Nov 17 17:23:13 EST 2015
On 11/17/15 14:14, N.J. Thomas wrote:
> I noticed that when tor or tor-devel is installed on FreeBSD (on 10.2
> boxes), I need to do the following to make it work:
>
> sudo touch /var/log/tor
> sudo mkdir /var/run/tor
> sudo chown _tor:_tor /var/log/tor
> sudo chown _tor:_tor /var/run/tor
>
> Without /var/log/tor, nothing runs. Without /var/run/tor, the pid file
> is not written, so "service tor status" and its brethren don't think
> anything is running.
>
> Has anyone else noticed the same? Am I doing something wrong with my
> install, or does this need to be fixed?
>
on my end this info is already included in the pkg-message.in file which
should get printed to stdout when installing the pkg. here's the
contents of this file on my workstation:
> cat /usr/ports/security/tor-devel/files/pkg-message.in
================================================================================
To enable the tor server, set tor_enable="YES" in your /etc/rc.conf
and edit %%PREFIX%%/etc/tor/torrc as desired. (However, note that the
%%PREFIX%%/etc/rc.d/tor rc.subr script can override some torrc
options: see that script for details.) To use the torify script, install
the net/torsocks port. After installing tor for the first time, or after
a major update of tor, you should:
rm -r /var/db/tor /var/run/tor
mkdir -p /var/db/tor/data /var/run/tor
touch /var/log/tor
chown -R _tor:_tor /var/db/tor /var/log/tor /var/run/tor
chmod -R 700 /var/db/tor
before starting the tor server. Tor users are strongly advised to
prevent traffic
analysis that exploits sequential IP IDs by setting:
sysctl net.inet.ip.random_id=1
(see sysctl.conf(5)).
================================================================================
cheers,
-pete
--
Pete Wright
pete at nomadlogic.org
twitter => @nomadlogicLA
More information about the Tor-BSD
mailing list