[tor-bugs] #28356 [Core Tor/Tor]: DataDirectoryGroupReadable and CacheDirectoryGroupReadable conflicts forcing sandboxed Tor to crash

[Tor Bug Tracker & Wiki]

#28356: DataDirectoryGroupReadable and CacheDirectoryGroupReadable conflicts
forcing sandboxed Tor to crash
-------------------------------------------------+-------------------------
 Reporter:  wagon                                |          Owner:  arma
     Type:  defect                               |         Status:
                                                 |  assigned
 Priority:  High                                 |      Milestone:  Tor:
                                                 |  0.3.5.x-final
Component:  Core Tor/Tor                         |        Version:  Tor:
                                                 |  0.3.4.9
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-crash, regression, 035-roadmap-  |  Actual Points:
  proposed, 035-backport, 034-backport, 033      |
  -backport-maybe, 029-backport-maybe            |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by wagon):

 == Problem 4

 We have similar problem with Tor logs. Default permissions are:

 {{{
 # ls -la /var/log/tor | awk '{print $1,$3,$4,$5,$9}' | column -t
 total
 drwxr-s---  debian-tor  adm   4096  ./
 drwxr-xr-x  root        root  4096  ../
 -rw-r--r--  debian-tor  adm   0     log
 }}}

 Since the default group is not `debian-tor`, user in `debian-tor` group
 (e.g., user which uses Nyx) cannot  list a content of `log` file. By
 default, Nyx wants to print its content. So, now, if we want Tor logs
 shown in Nyx, we have either to change the group manually (which is not
 good) or run Nyx under `debian-tor` user (which is
 [[https://trac.torproject.org/projects/tor/ticket/25890|not recommended]]
 too).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28356#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online