[tor-bugs] #25890 [Core Tor/Nyx]: add instructions for running nyx safely to the FAQ
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Nov 6 19:24:19 UTC 2018
#25890: add instructions for running nyx safely to the FAQ
--------------------------+-----------------------------------
Reporter: arma | Owner: atagar
Type: enhancement | Status: needs_information
Priority: Medium | Milestone:
Component: Core Tor/Nyx | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------+-----------------------------------
Comment (by wagon):
> Disable cookie authentication in `torrc` (we don't need it), but enable
password authentication in `torrc`. If you curious about the reasons, read
my explanation in another comment.
UPDATE: In principle, it may be better to use SafeCookie as I explained
[[https://trac.torproject.org/projects/tor/ticket/28295#comment:7|here]].
If Nyx has to have access to `torrc` file and Tor logs (to display their
content), user used to run Nyx should be added to `debian-tor` group. If
restricted functionality (only `ControlPort` is accessible) is sufficient,
Nyx can be launched from user who is not member of `debian-tor` group.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25890#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list