On Tue, 29 Nov 2016, Joey Hess wrote:
> I suggest that the Debian tor package include a world-readable
> directory, which tor is allowed to access by its apparmor config and any
> other things used to lock it down. Subdirectories can then be
> added as needed to contain hidden service unix sockets, etc.
I do like the idea. Do you have any suggestions on naming it? Do we
want directory shared across all tor instances, or do we want a
different one for every instance?
Should we actually ship the directory, or would it be sufficient to just
make the apparmor and systemd restrictions allow that directory and have
the admin create it when they need it?
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `- https://www.debian.org/