FS#79490 - [tor] Systemctl reload fails because of insufficient capabilities

Attached to Project: Arch Linux
Opened by Chichi Yabgu (yabgu) - Sunday, 27 August 2023, 13:46 GMT
Last edited by Toolybird (Toolybird) - Sunday, 27 August 2023, 22:15 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
When I reload the tor service using systemctl it was failing and the output of "systemctl status tor" was as follows:
...
Aug 27 16:35:03 yabgu systemd[1]: Reloading Anonymizing overlay network for TCP...
Aug 27 16:35:03 yabgu kill[23349]: kill: sending signal to 23345 failed: Operation not permitted
Aug 27 16:35:03 yabgu systemd[1]: tor.service: Control process exited, code=exited, status=1/FAILURE
Aug 27 16:35:03 yabgu systemd[1]: Reload failed for Anonymizing overlay network for TCP.

So I edited the /lib/systemd/system/tor.service file, added CAP_KILL to the CapabilityBoundingSet and the problem was gone.

Package Version: 0.4.8.4-1
This task depends upon

Closed by  Toolybird (Toolybird)
Sunday, 27 August 2023, 22:15 GMT
Reason for closing:  Duplicate
Additional comments about closing:   FS#70295 

Loading...