Re: [CentOS] tor and selinux

2017-01-30 Thread Gordon Messmer
On 01/29/2017 10:32 PM, Mark wrote: That's strange, because I started the tor process simply with sudo systemctl start tor Yes, it looks like that package runs the service as "root". That doesn't seem like a good default, and it could be a packaging bug. Try adding "User toranon" to the co

Re: [CentOS] tor and selinux

2017-01-29 Thread Mark
On Sun, 2017-01-29 at 15:53 -0800, Gordon Messmer wrote: > On 01/29/2017 11:59 AM, Mark wrote: > > As I don't know what dac_override is I don't know if it's a good > > idea > > to give it to tor and the confidence seems quite low. > > > dac_override indicates that you're running your process as r

Re: [CentOS] tor and selinux

2017-01-29 Thread Gordon Messmer
On 01/29/2017 11:59 AM, Mark wrote: As I don't know what dac_override is I don't know if it's a good idea to give it to tor and the confidence seems quite low. dac_override indicates that you're running your process as root, and it's trying to do something on the filesystem which is not expli

[CentOS] tor and selinux

2017-01-29 Thread Mark
I'm experimenting with tor hidden services and got it to work nicely on my Centos7, with tor from epel. That is, until I booted the machine. Then SELinux kicked in and in the logs there's  [warn] Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied The permissions are drwx