[tor-bugs] #15195 [- Select a component]: systemd service doesn't work with ControlSocket

[Tor Bug Tracker & Wiki]

#15195: systemd service doesn't work with ControlSocket
----------------------------------+------------------------------------
 Reporter:  poncho                |          Owner:
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:
Component:  - Select a component  |        Version:  Tor: 0.2.6.3-alpha
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+------------------------------------
 systemd[1]: Starting Anonymizing overlay network for TCP...
 tor[7288]: Mar 09 09:55:22.363 [notice] Tor v0.2.6.3-alpha (git-
 7df7e8d71d7afc42) running on Linux with Libevent 2.0.22-stable, OpenSSL
 1.0
 tor[7288]: Mar 09 09:55:22.363 [notice] Tor can't help you if you use it
 wrong! Learn how to be safe at https://www.torproject.org/download
 tor[7288]: Mar 09 09:55:22.363 [notice] This version is not a stable Tor
 release. Expect more bugs than usual.
 tor[7288]: Mar 09 09:55:22.363 [notice] Read configuration file
 "/etc/tor/torrc".
 tor[7288]: Mar 09 09:55:22.365 [notice] Caching new entry tor for tor
 tor[7288]: Mar 09 09:55:22.365 [notice] Caching new entry tor for tor
 tor[7288]: Mar 09 09:55:22.365 [notice] Not disabling debugger attaching
 for unprivileged users.
 tor[7288]: Configuration was valid
 tor[7291]: Mar 09 09:55:22.740 [notice] Tor v0.2.6.3-alpha (git-
 7df7e8d71d7afc42) running on Linux with Libevent 2.0.22-stable, OpenSSL
 1.0
 tor[7291]: Mar 09 09:55:22.740 [notice] Tor can't help you if you use it
 wrong! Learn how to be safe at https://www.torproject.org/download
 tor[7291]: Mar 09 09:55:22.740 [notice] This version is not a stable Tor
 release. Expect more bugs than usual.
 tor[7291]: Mar 09 09:55:22.740 [notice] Read configuration file
 "/etc/tor/torrc".
 tor[7291]: Mar 09 09:55:22.742 [notice] Opening Socks listener on
 127.0.0.1:9050
 tor[7291]: Mar 09 09:55:22.742 [notice] Caching new entry tor for tor
 tor[7291]: Mar 09 09:55:22.742 [notice] Opening Control listener on
 /var/run/tor/control
 tor[7291]: Mar 09 09:55:22.742 [warn] Could not unlink
 /var/run/tor/control: Permission denied
 tor[7291]: Mar 09 09:55:22.742 [notice] Closing partially-constructed
 Socks listener on 127.0.0.1:9050
 tor[7291]: Mar 09 09:55:22.742 [notice] Closing partially-constructed
 Socks listener on 127.0.0.1:9150
 tor[7291]: Mar 09 09:55:22.742 [warn] Failed to parse/validate config:
 Failed to bind one of the listener ports.
 tor[7291]: Mar 09 09:55:22.742 [err] Reading config failed--see warnings
 above.
 systemd[1]: tor.service: main process exited, code=exited, status=255/n/a

 To make it work, I need to add
 ReadWriteDirectories = -/var/run/tor
 and
 CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
 CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER
 (the additional capabilities are CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15195>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online