diff --git a/security/tor/src/opnsense/service/scripts/tor/get_hostnames b/security/tor/src/opnsense/service/scripts/tor/get_hostnames index a108dc51a..683bd8b7d 100755 --- a/security/tor/src/opnsense/service/scripts/tor/get_hostnames +++ b/security/tor/src/opnsense/service/scripts/tor/get_hostnames @@ -1,6 +1,35 @@ #!/usr/local/bin/php service->__items as $service) { + $directory_name = ((string)$service->name); + $hostdir = TOR_DATA_DIR . '/' . $directory_name; + if (!file_exists($hostdir)) { + mkdir($hostdir); + chown($hostdir, '_tor'); + chgrp($hostdir, '_tor'); + chmod($hostdir, 0700); + } +} diff --git a/security/tor/src/opnsense/service/scripts/tor/setup.sh b/security/tor/src/opnsense/service/scripts/tor/setup.sh index 1af7a235b..5c71d2b37 100755 --- a/security/tor/src/opnsense/service/scripts/tor/setup.sh +++ b/security/tor/src/opnsense/service/scripts/tor/setup.sh @@ -6,5 +6,14 @@ mkdir -p /var/run/tor chown _tor:_tor /var/db/tor chmod 700 /var/db/tor +touch /var/log/tor.log +chmod 700 /var/log/tor.log +chown _tor:_tor /var/log/tor.log + +chown _tor:_tor /var/run/tor + +# create hidden service dirs: +/usr/local/opnsense/service/scripts/tor/make_hidden_service_dirs.php + # required to access the pf device for nat /usr/sbin/pw groupmod proxy -m _tor diff --git a/security/tor/src/opnsense/service/scripts/tor/tor_helper.php b/security/tor/src/opnsense/service/scripts/tor/tor_helper.php index f05179572..0be18b2bc 100644 --- a/security/tor/src/opnsense/service/scripts/tor/tor_helper.php +++ b/security/tor/src/opnsense/service/scripts/tor/tor_helper.php @@ -1,3 +1,32 @@