Package: tor Version: 0.1.2.13-2 Severity: important Tags: patch Hi,
I patched the /etc/init.d/tor to use /bin/sh for the config verify as else the init script will fail if the login shell for the user debian-tor is set to /bin/false (or other) for security reason. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (800, 'stable'), (700, 'testing'), (600, 'unstable'), (500, 'oldstable'), (60, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/dash Kernel: Linux 2.4.34 Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to de_DE) Versions of packages tor depends on: ii adduser 3.102 Add and remove users and groups ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries ii libevent1 1.1a-1 An asynchronous event notification ii libssl0.9.8 0.9.8c-4 SSL shared libraries ii tsocks 1.8beta5-3 transparent network access through ii zlib1g 1:1.2.3-13 compression library - runtime Versions of packages tor recommends: ii privoxy 3.0.6-2 Privacy enhancing HTTP Proxy ii socat 1.4.3.1-1 multipurpose relay for bidirection -- no debconf information -- Klaus Ethgen http://www.ethgen.de/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <[EMAIL PROTECTED]> Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B
--- tor.orig 2007-04-29 14:24:56.000000000 +0200 +++ tor 2007-04-29 14:25:52.000000000 +0200 @@ -90,9 +90,9 @@ fi echo "Starting $DESC: $NAME..." - if ! su -c "$DAEMON --verify-config" debian-tor > /dev/null; then + if ! su -s /bin/sh -c "$DAEMON --verify-config" debian-tor > /dev/null; then echo "ABORTED: Tor configuration invalid:" >&2 - su -c "$DAEMON --verify-config" debian-tor >&2 + su -s /bin/sh -c "$DAEMON --verify-config" debian-tor >&2 exit 1 fi @@ -131,9 +131,9 @@ exit 0 fi - if ! su -c "$DAEMON --verify-config" debian-tor > /dev/null; then + if ! su -s /bin/sh -c "$DAEMON --verify-config" debian-tor > /dev/null; then echo "ABORTED: Tor configuration invalid:" >&2 - su -c "$DAEMON --verify-config" debian-tor >&2 + su -s /bin/sh -c "$DAEMON --verify-config" debian-tor >&2 exit 1 fi @@ -148,9 +148,9 @@ fi ;; restart) - if ! su -c "$DAEMON --verify-config" debian-tor > /dev/null; then + if ! su -s /bin/sh -c "$DAEMON --verify-config" debian-tor > /dev/null; then echo "Restarting Tor ABORTED: Tor configuration invalid:" >&2 - su -c "$DAEMON --verify-config" debian-tor >&2 + su -s /bin/sh -c "$DAEMON --verify-config" debian-tor >&2 exit 1 fi
signature.asc
Description: Digital signature
