[tor-bugs] #25890 [Core Tor/Nyx]: add instructions for running nyx safely to the FAQ

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Nov 6 19:24:19 UTC 2018


#25890: add instructions for running nyx safely to the FAQ
--------------------------+-----------------------------------
 Reporter:  arma          |          Owner:  atagar
     Type:  enhancement   |         Status:  needs_information
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Nyx  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+-----------------------------------

Comment (by wagon):

 > Disable cookie authentication in `torrc` (we don't need it), but enable
 password authentication in `torrc`. If you curious about the reasons, read
 my explanation in another comment.
 UPDATE: In principle, it may be better to use SafeCookie as I explained
 [[https://trac.torproject.org/projects/tor/ticket/28295#comment:7|here]].
 If Nyx has to have access to `torrc` file and Tor logs (to display their
 content), user used to run Nyx should be added to `debian-tor` group. If
 restricted functionality (only `ControlPort` is accessible) is sufficient,
 Nyx can be launched from user who is not member of `debian-tor` group.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25890#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list