From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id gJUFHEaOT2AbQgAA0tVLHw (envelope-from ) for ; Mon, 15 Mar 2021 16:41:42 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id UIPOF0aOT2DOKwAAB5/wlQ (envelope-from ) for ; Mon, 15 Mar 2021 16:41:42 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 08B5C8D49 for ; Mon, 15 Mar 2021 17:41:42 +0100 (CET) Received: from localhost ([::1]:55446 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lLqHk-0000sA-Si for larch@yhetil.org; Mon, 15 Mar 2021 12:41:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33818) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lLqCI-0005hx-B7 for guix-patches@gnu.org; Mon, 15 Mar 2021 12:36:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:53286) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lLqCH-0000Uv-Vn for guix-patches@gnu.org; Mon, 15 Mar 2021 12:36:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lLqCH-0008MR-Tg for guix-patches@gnu.org; Mon, 15 Mar 2021 12:36:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#47155] [PATCH] gnu: Respect DataDirectoryGroupReadable option of tor. Resent-From: Maxime Devos Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 15 Mar 2021 16:36:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47155 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: raid5atemyhomework , 47155@debbugs.gnu.org Received: via spool by 47155-submit@debbugs.gnu.org id=B47155.161582614632114 (code B ref 47155); Mon, 15 Mar 2021 16:36:01 +0000 Received: (at 47155) by debbugs.gnu.org; 15 Mar 2021 16:35:46 +0000 Received: from localhost ([127.0.0.1]:36599 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lLqC2-0008Lt-6e for submit@debbugs.gnu.org; Mon, 15 Mar 2021 12:35:46 -0400 Received: from xavier.telenet-ops.be ([195.130.132.52]:59846) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lLqBz-0008Lj-RO for 47155@debbugs.gnu.org; Mon, 15 Mar 2021 12:35:45 -0400 Received: from ptr-bvsjgyjmffd7q9timvx.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:aaf1:9810:a0b8:a55d]) by xavier.telenet-ops.be with bizsmtp id ggbh2400J0mfAB401gbhR3; Mon, 15 Mar 2021 17:35:42 +0100 Message-ID: From: Maxime Devos Date: Mon, 15 Mar 2021 17:35:19 +0100 In-Reply-To: References: Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-qdz/pac2YKpJviTbCaIA" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21; t=1615826142; bh=Haxsom1m3PwotUKl85Y6FTnM/8ZYqLkXEbpWqeNsxGs=; h=Subject:From:To:Date:In-Reply-To:References; b=ItGAi12VonYuqCoSAM6JfX6VFRYzmLcxZXN8IZrCJEH1yKckbfpPaRyuxHwqegdRv NYUNrqTBsJxr199fzL1eB8mXzT4Z+cuUjkB3asy0jw7kU6OW/b1l+MvaS4GE2dy7tN nWguiWQNq4WPjAr/17dH1XmKXdm4Ah5PsJi52gNdA0ekVGdbR/Ee3VV7Orpz87KK8x /JkDYUgziW9barXXm6WwHeg2uy2a625CN027FrUATt5RNb4FhGntVb5f7vzwftyXng kdX8UVRyJhIFZ+KoL7Md1JWlV9ksL7YWlYbEeBFG0cS75nS7LiwYJOQN3j7TkvzdTp 7wvzhCDaHVL9w== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1615826502; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=Haxsom1m3PwotUKl85Y6FTnM/8ZYqLkXEbpWqeNsxGs=; b=anRtHS/euwZSajiH0e2HNUd3+KoGmC9bNvnHb8OnQAwi0kLYKnLyD7tc/Lp/XT2GQv18+d Uv2H9jLiTzyYVmz9SnnzWe7wCxipz29bzx6vUXDmJ2ILW3R4Csq7P+mDPINApclRsugq79 yynbu1mELWO/hm1EqNzg446e5uc0XhJWTeHQ8m8+oY0JAvKjGsXl+b78b9JCAqow2Oa18R 76IwiO7enWmIuzT/mquSwJLf2M5hddFmjFYRfVgyU+IjyOltootmplHbgpYuPqWb9jx7CE tvSOAxFh5rUsLOBkFphD50NYln3N4XzVorWZG95A5d4tshl05ISL8W5SX/wDsg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1615826502; a=rsa-sha256; cv=none; b=ZIDTuRumUsR1Rhe5ClrS29lXUDS2bFQihX1dd3vs8KEYbz5dng1Do9v5m4EfRIU2xhpxcM kNr79+3Nyqf12+PlaHUkdLmIELrkCidXQuUi+TGIKQWJjbsJFpNAMznpcAYZoGZQ/Achef mKebnBiqmSyfy2fjeFIxSWt67wP5zENEBV0X8X8OmB65U2HHzwUkzzx5ixSfYVgfFyhKnW oo5Xb0Kr/oJp4HfgWffSrteG/LPY0PbogEidnug1pHgKhIFj5cG7c3xCxGy3QFsLaBhwxI r21Xj1pqPyYBzJOdIOpfMoQAzWEuJPJLC68OpK1wxjYDuNpn6p5K/B6ZpT4v3w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=ItGAi12V; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: -3.40 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=ItGAi12V; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 08B5C8D49 X-Spam-Score: -3.40 X-Migadu-Scanner: scn0.migadu.com X-TUID: SFQy+mSAI6fa --=-qdz/pac2YKpJviTbCaIA Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, 2021-03-15 at 11:15 +0000, raid5atemyhomework via Guix-patches via = wrote: > Currently, if you set DataDirectoryGroupReadable 1 in your torrc, What are the reasons for setting DataDirectoryGroupReadable 1? > it will be respected only if tor is started up. IIUC, tor will adjust the permissions of the directory to make it group readable (while Guix' activation code creates the directory group-unreadable). > If you reconfigure your OS without restarting the tor service, > the directory permissions are reset due to the activation code being > re-run and resetting the directory permissions. >=20 > This change simply does not chmod if the directory already exists. I believe it would be more transparent to introduce a (data-directory-group-readable? #t/#f), with #f as default, to tor-configuration (adjusting tor-configuration->torrc) and change the permission bits passed to chmod appropriately. (Documentation & reproducible system configuration & one integrated system (in the software sense) and all that) Greetings, Maxime. --=-qdz/pac2YKpJviTbCaIA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYIADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYE+MxxccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7i8rAQDnfcVXyhtefxIJYr7MI1J1yPUo Km9Q7+oxivLBt6LEQAEA8zrxUKFQhXNAfyCVu6esCCUGjes2fRUREDSaDnpbAQw= =67Ed -----END PGP SIGNATURE----- --=-qdz/pac2YKpJviTbCaIA--