
<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div><br></div><div><blockquote type="cite"><span style="background-color: rgba(255, 255, 255, 0);">sudo -u debian-tor nyx</span></blockquote></div><div><br></div><blockquote type="cite"><div><div>That's it!<br></div><div>Thanks a lot!</div></div></blockquote><br><div>That's not great for security, now nyx can read your tor private keys.</div><div>(It probably won't, but still…)</div><div><br></div><div>If you add your controller to the debian-tor group, and set the</div><div>appropriate options to make your cookie file group-readable,</div><div>then nyx can only read those files.</div><div><br></div><div>I'm not sure why that isn't working for you.</div><div><br></div><div>Does your torrc-defaults or torrc contain:</div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);">CookieAuthFileGroupReadable 1</span></div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);">If using a control socket:</span></div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><dl style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><dt class="hdlist1" style="margin: 0px 0px 10px; padding: 0px; border: 0px; outline: 0px; font-style: inherit; vertical-align: baseline; line-height: 28px;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; font-style: inherit; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);">ControlPort unix:/path/to/file GroupWritable</span></dt><dt class="hdlist1" style="margin: 0px 0px 10px; padding: 0px; border: 0px; outline: 0px; font-style: inherit; vertical-align: baseline; line-height: 28px;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);">ControlPortFileGroupReadable 1</span></dt></dl></span></span></span></div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);"><br></span></span></div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);">And maybe:</span></span></div><div><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: rgba(255, 255, 255, 0);">DataDirectoryGroupReadable 1</span></span></div><div><strong style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><strong style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;"><dl style="margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: normal; vertical-align: baseline;"><dt class="hdlist1" style="margin: 0px 0px 10px; padding: 0px; border: 0px; outline: 0px; font-weight: bold; font-style: inherit; vertical-align: baseline; line-height: 28px;"><br></dt></dl></strong></strong></div><div>T</div></body></html>