On Sun, Feb 18, 2018 at 07:25:55AM -0800, msgh...@gmail.com wrote:
> On Sunday, February 18, 2018 at 9:29:26 PM UTC+7, sebuq wrote:
> > The command sudo tor --verify-config produces an output You are running
> > Tor as root. You don't need to, and you probably shouldn't (full output
> > below).
> > 
> > How is this rectified?
> > 
> > 
> > user@host:~$ sudo tor --verify-config
> > Feb 18 14:21:23.474 [notice] Tor 0.3.2.9 (git-64a719dd25a21acb) running
> > on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1t, Zlib 1.2.8,
> > Liblzma 5.1.0alpha, and Libzstd N/A.
> > Feb 18 14:21:23.474 [notice] Tor can't help you if you use it wrong!
> > Learn how to be safe at https://www.torproject.org/download/download#warning
> > Feb 18 14:21:23.474 [notice] Read configuration file "/etc/tor/torrc".
> > Feb 18 14:21:23.477 [warn] You are running Tor as root. You don't need
> > to, and you probably shouldn't.
> 
> Run it as user without sudo as warning suggests:
> user@host:~$ tor --verify-config
> 

sudo allows you to execute a command as superuser, or another user. In
Qubes, it's use is unfettered, although you can change this if you wish.
This is in the FAQ, and also here:
https://www.qubes-os.org/doc/vm-sudo

By calling "sudo tor" you invoke tor as root, which is not recommended.
As msgheap says, dont use sudo here.
If you check with ps, you'll see that tor isnt running as root in normal
operation.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180218165113.vxfl45e7qr6cdpwb%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to