Tor: fix permission of /var/ipfire/tor/settings

The settings file must be writeable for group "nobody" so
users can change their Tor settings via WebUI. Since other
files in /var/ipfire/tor/ does not need this workaround, only
the settings file permissions are changed.

Sorry for the late fix; this was reported by various people
in the forum, too (I was unaware of so many Tor users in our
community).

Fixes #12117

Reported-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

diff --git a/lfs/tor b/lfs/tor
index d918910d4617bb8255d144c2182a7c84288dcc28..1e234e0ab1a0c9caa7d789936333478ceef28ec0 100644 (file)
--- a/lfs/tor
+++ b/lfs/tor
@@ -32,7 +32,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = tor
-PAK_VER    = 40
+PAK_VER    = 41
 
 DEPS       = "libseccomp"
 

diff --git a/src/paks/tor/install.sh b/src/paks/tor/install.sh
index 1659871b65be6befe7557400d0feea5422e08d34..4d03531558c07db3757466baec25afe502e407ed 100644 (file)
--- a/src/paks/tor/install.sh
+++ b/src/paks/tor/install.sh
@@ -38,4 +38,8 @@ restore_backup ${NAME}
 # Adjust some folder permission for new UID/GID
 chown -R tor:tor /var/lib/tor /var/ipfire/tor
 
+# Tor settings file needs to be writeable by nobody group for WebUI
+chown tor:nobody /var/ipfire/tor/settings
+chmod 664 /var/ipfire/tor/settings
+
 start_service --background ${NAME}