[tor-bugs] #10700 [Website]: tell users about tor-arm on the tor-relay-debian page

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jan 22 22:24:41 UTC 2014


#10700: tell users about tor-arm on the tor-relay-debian page
-------------------------+-----------------
     Reporter:  arma     |      Owner:
         Type:  defect   |     Status:  new
     Priority:  normal   |  Milestone:
    Component:  Website  |    Version:
   Resolution:           |   Keywords:
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-----------------

Comment (by arma):

 apparently the arm package tells people to "sudo -u debian-tor arm", and
 that is very unwise because it gives arm access to (e.g.) tor's keys.
 That's probably a good bug to file for arm.

 Better is to have users "sudo adduser $USER debian-tor" as the user that
 will be running arm, and then logout/login again and run arm. It will
 automatically look for both the control port (not configured by default)
 and the control socket (configured by default in the deb), and "should
 just work".

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10700#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list