anon-ws-disable-stacked-tor/blob/master/etc/init.d/tor.anondist vs systemd, insserv already provided issue

phabricator-migrator · February 19, 2024, 5:49pm

Information

ID: 303
PHID: PHID-TASK-4pj3w6wxs37ijkjwzeef
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

package:

file:
https://github.com/Whonix/anon-ws-disable-stacked-tor/blob/master/etc/init.d/tor.anondist

We probably won’t ship our own systemd unit file for Tor (T304).

But what happens if upstream starts shipping one? (tor.service) ((bug report))

~~This is visible during package installation / upgrade.~~

~~update-rc.d: using dependency based boot sequencing~~
~~insserv: script tor.anondist-orig: service tor already provided!~~

~~Similar issue as T321.~~ (fixed)

Comments

Patrick

2015-05-28 16:33:43 UTC

Patrick

2015-05-28 19:57:15 UTC

Tested by placing /lib/systemd/system/tor.service from Files · HEAD · The Tor Project / Core / Tor · GitLab (removed spaces).

# tor.service -- this systemd configuration file for Tor sets up a
# relatively conservative, hardened Tor service.  You may need to
# edit it if you are making changes to your Tor configuration that it
# does not allow.  Package maintainers: this should be a starting point
# for your tor.service; it is not the last point.

[Unit]
Description=Anonymizing overlay network for TCP
After=syslog.target network.target nss-lookup.target

[Service]
Type=notify
NotifyAccess=all
ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config
ExecStart=/usr/bin/tor -f /etc/tor/torrc
ExecReload=/bin/kill -HUP ${MAINPID}
KillSignal=SIGINT
TimeoutSec=30
Restart=on-failure
WatchdogSec=1m
LimitNOFILE=32768

# Hardening
PrivateTmp=yes
PrivateDevices=yes
ProtectHome=yes
ProtectSystem=full
ReadOnlyDirectories=/
ReadWriteDirectories=-/var/lib/tor
ReadWriteDirectories=-/var/log/tor
NoNewPrivileges=yes
CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE

[Install]
WantedBy=multi-user.target

systemd compatibility - https://phabricator.whonix.org/T303:
systemd compatibility - https://phabricator.whonix.org/T303 · Whonix/anon-ws-disable-stacked-tor@21a6f2b · GitHub

Patrick

2015-06-06 15:40:23 UTC