summarylogtreecommitdiffstats
path: root/tor.service
diff options
context:
space:
mode:
Diffstat (limited to 'tor.service')
-rw-r--r--tor.service3
1 files changed, 1 insertions, 2 deletions
diff --git a/tor.service b/tor.service
index 481e3c0e2700..6aa6e8b66151 100644
--- a/tor.service
+++ b/tor.service
@@ -5,7 +5,6 @@ After=syslog.target network.target nss-lookup.target
[Service]
Type=notify
NotifyAccess=all
-Group=tor
ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config
ExecStart=/usr/bin/tor -f /etc/tor/torrc
ExecReload=/bin/kill -HUP ${MAINPID}
@@ -24,7 +23,7 @@ ProtectKernelTunables=yes
ReadOnlyDirectories=/
ReadWriteDirectories=-/var/lib/tor -/var/log/tor
NoNewPrivileges=yes
-CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH
[Install]
WantedBy=multi-user.target