What's wrong with my TOR?

I am an XMPP server operator at darkness.su. The server runs on Centos 6.

I installed TOR and configured it to provide hidden server access. It worked fine at first, but since updating it a few months ago, it started giving me the following errors:

    799  May 25 14:19:37.060 [warn] Permissions on directory /var/lib/tor/hidden_service are too permissive.
  800  May 25 14:19:37.060 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.
  801  May 25 14:19:37.060 [err] Reading config failed--see warnings above.

      

I tried to check the logs, but I can't find them and the setting doesn't work. I tried uninstalling TOR and erasing its entire folder and then reinstalling it. Same.

I am installing via yum from the TOR project repository.

With chmod 700 in the hidden services directory (owned by TOR):

Jul 24 21:39:05.573 [warn] Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied
Jul 24 21:39:05.573 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.
Jul 24 21:39:05.573 [err] Reading config failed--see warnings above

      

After changing the owner of the directory to root:

Jul 24 22:11:36.236 [warn] /var/lib/tor/hidden_service/ is not owned by this user (_tor, 496) but by root (0). Perhaps you are running Tor as the wrong user?
Jul 24 22:11:36.236 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.
Jul 24 22:11:36.236 [err] Reading config failed--see warnings above.

      

+3


source to share


2 answers


Permissions on directory /var/lib/tor/hidden_service are too permissive.

      

This means that too many users have access to this directory. Try to change it:



chmod 700 /var/lib/tor/hidden_service

      

I am assuming that the user doing the TOR is also the owner of the directory.

+8


source


Your original permissions issue (I got them after cloning the virtual hdd in VirtualBox) was caused by broken labels in selinux. On CentOS / Linux this is fixed with:



restorecon -r -v /var/lib/tor

      

0


source







All Articles