Mirrors/spark
1
0
Fork 0
mirror of https://github.com/pigmonkey/spark.git synced 2026-07-31 19:51:58 +00:00
Code Issues Projects Releases Wiki Activity

use default firejail tor profile

Browse source 
requires firejail >= 0.9.52

I haven't figured out why private-dev breaks tor.
This commit is contained in:
Pig Monkey 2017-12-26 16:40:45 -08:00
parent d9cd95e9fa
commit 8ffeaf17b5
2 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/tor/files/tor-service-override.conf
View file

@ -1,4 +1,4 @@
[Service]
ExecStart=
ExecStart=/usr/bin/firejail --writable-var --ignore=private-dev /usr/bin/tor -f /etc/tor/torrc
ExecStart=/usr/bin/firejail /usr/bin/tor -f /etc/tor/torrc
User=root

12
roles/tor/tasks/main.yml
View file

@ -23,6 +23,18 @@
tags:
- firejail
- name: Verify Tor firejail local profile exists
file: path=/etc/firejail/tor.local state=touch
tags:
- firejail
- name: Allow Tor firejail /dev access
lineinfile:
dest: /etc/firejail/tor.local
line: "ignore private-dev"
tags:
- firejail
- name: Enable and start Tor
service: name=tor enabled=yes state=started
when: tor.run_on == "all"