systemd service doesn't work with ControlSocket
systemd[1]: Starting Anonymizing overlay network for TCP... tor[7288]: Mar 09 09:55:22.363 [notice] Tor v0.2.6.3-alpha (git-7df7e8d71d7afc42) running on Linux with Libevent 2.0.22-stable, OpenSSL 1.0 tor[7288]: Mar 09 09:55:22.363 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download tor[7288]: Mar 09 09:55:22.363 [notice] This version is not a stable Tor release. Expect more bugs than usual. tor[7288]: Mar 09 09:55:22.363 [notice] Read configuration file "/etc/tor/torrc". tor[7288]: Mar 09 09:55:22.365 [notice] Caching new entry tor for tor tor[7288]: Mar 09 09:55:22.365 [notice] Caching new entry tor for tor tor[7288]: Mar 09 09:55:22.365 [notice] Not disabling debugger attaching for unprivileged users. tor[7288]: Configuration was valid tor[7291]: Mar 09 09:55:22.740 [notice] Tor v0.2.6.3-alpha (git-7df7e8d71d7afc42) running on Linux with Libevent 2.0.22-stable, OpenSSL 1.0 tor[7291]: Mar 09 09:55:22.740 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download tor[7291]: Mar 09 09:55:22.740 [notice] This version is not a stable Tor release. Expect more bugs than usual. tor[7291]: Mar 09 09:55:22.740 [notice] Read configuration file "/etc/tor/torrc". tor[7291]: Mar 09 09:55:22.742 [notice] Opening Socks listener on 127.0.0.1:9050 tor[7291]: Mar 09 09:55:22.742 [notice] Caching new entry tor for tor tor[7291]: Mar 09 09:55:22.742 [notice] Opening Control listener on /var/run/tor/control tor[7291]: Mar 09 09:55:22.742 [warn] Could not unlink /var/run/tor/control: Permission denied tor[7291]: Mar 09 09:55:22.742 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9050 tor[7291]: Mar 09 09:55:22.742 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9150 tor[7291]: Mar 09 09:55:22.742 [warn] Failed to parse/validate config: Failed to bind one of the listener ports. tor[7291]: Mar 09 09:55:22.742 [err] Reading config failed--see warnings above. systemd[1]: tor.service: main process exited, code=exited, status=255/n/a
To make it work, I need to add ReadWriteDirectories = -/var/run/tor and CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER (the additional capabilities are CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER)
Trac:
Username: poncho