[tor-bugs] #13805 [Tor]: Improve hardening in tor.service

[Tor Bug Tracker & Wiki]

#13805: Improve hardening in tor.service
--------------------------+--------------------------------
     Reporter:  candrews  |      Owner:
         Type:  defect    |     Status:  new
     Priority:  normal    |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor       |    Version:
   Resolution:            |   Keywords:  systemd
Actual Points:            |  Parent ID:
       Points:            |
--------------------------+--------------------------------

Comment (by candrews):

 Gentoo also suggests these 2 changes:
 1)
 {{{
 "Restart = on-failure"
 }}}
 be removed as it's unnecessary and confusing.

 2)
 {{{
 TimeoutSec = 30
 }}}
 be removed because systemd has a default timeout, and user can change it
 in system.conf. Service setting overrides the user-set global timeout, and
 it should do that only when there's a good reason to -- for example, when
 a specific service takes real long to shutdown or start.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13805#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online