bug17562-allow-root-group-read 434 B

1234567
  1. o Minor features (unix permissions):
  2. - If any directory created by Tor is marked as group readable, the
  3. filesystem group is allowed to be either the default GID or the root
  4. user. Allowing root to read the DataDirectory prevents the need for
  5. CAP_READ_SEARCH when using systemd's CapabilityBoundingSet, or
  6. dac_read_search when using SELinux.
  7. Implements part of ticket 17562. Patch from Jamie Nguyen.