From patchwork Tue Nov 12 20:06:48 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Stephan Feddersen X-Patchwork-Id: 2592 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 47CJgG4s0Xz43Tf for ; Tue, 12 Nov 2019 20:07:06 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 47CJgF159Qz2Pg; Tue, 12 Nov 2019 20:07:05 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 47CJgD747dz2yTX; Tue, 12 Nov 2019 20:07:04 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 47CJgB6SjMz2y60 for ; Tue, 12 Nov 2019 20:07:02 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 47CJgB31lWz2Pg; Tue, 12 Nov 2019 20:07:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=201909rsa; t=1573589222; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=OLCXUCFHjrQJwapYEX/MdsLLAaqWR6xW2XWewic8JMU=; b=musTGicdPR78nU/ZXvzn2u6r1rWQkXCNccNzS/JvfK3EfB/PLX/+yOCpYo6EU6S7qwW2dW PpTi/i+NzwIlHgfLBgsWEtDrYECWuyur3yAvvoxfWs2vwaXlXE4KjbyQCRB2N7VXSGEmmd 9Sviu003XBcR372+PGGKkeWfl/AByBaQqMN2KNSKnrV+LPigN4M6zHepq+DX/az1mD/Tmy BBW3fQ82RyouPzjMEUKCsofTf/qvodbesxBY3Qy4AE/9w9tjphIcVkE+R8JQgnOXTx/kU4 cp0hkpLA7LcyoBCPi0p0H0JY1+4C30zm4NolPon2/lHwIWSzWEzIKalruXzhMQ== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=201909ed25519; t=1573589222; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=OLCXUCFHjrQJwapYEX/MdsLLAaqWR6xW2XWewic8JMU=; b=Zn0Hxa6HaqKoxQmFs46rLMYoWnRXIVtKpUpxMkzNPfFNjvPeAXlTeeWjWQlwWJdfBsO6WH Qp+aBiYNz+BHf8CQ== From: Stephan Feddersen To: development@lists.ipfire.org Subject: [PATCH 1/2] Tor: fix permissions of /var/ipfire/tor/torrc after installation Date: Tue, 12 Nov 2019 21:06:48 +0100 Message-Id: <20191112200649.5021-1-sfeddersen@ipfire.org> MIME-Version: 1.0 Authentication-Results: mail01.ipfire.org; auth=pass smtp.auth=sfeddersen smtp.mailfrom=sfeddersen@ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Arne Fitzenreiter Errors-To: development-bounces@lists.ipfire.org Sender: "Development" From: "peter.mueller@ipfire.org" Fixes #12220 Reported-by: Michael Tremer Signed-off-by: Peter Müller Signed-off-by: Arne Fitzenreiter --- lfs/tor | 2 +- src/paks/tor/install.sh | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/tor b/lfs/tor index ea07f6ce2..178f84be9 100644 --- a/lfs/tor +++ b/lfs/tor @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 43 +PAK_VER = 44 DEPS = "libseccomp" diff --git a/src/paks/tor/install.sh b/src/paks/tor/install.sh index 4d0353155..369b65f71 100644 --- a/src/paks/tor/install.sh +++ b/src/paks/tor/install.sh @@ -36,10 +36,10 @@ extract_files restore_backup ${NAME} # Adjust some folder permission for new UID/GID -chown -R tor:tor /var/lib/tor /var/ipfire/tor +chown -R tor:tor /var/lib/tor +chown -R tor:nobody /var/ipfire/tor -# Tor settings file needs to be writeable by nobody group for WebUI -chown tor:nobody /var/ipfire/tor/settings -chmod 664 /var/ipfire/tor/settings +# Tor settings files needs to be writeable by nobody group for WebUI +chmod 664 /var/ipfire/tor/{settings,torrc} start_service --background ${NAME}