Commit 5b3ba97e authored by anonym's avatar anonym
Browse files

Allow the _apt user to use Tor.

Now in Stretch, apt network operations are performed with the _apt user
and not root. In fact, let's try to not allow root to connect to Tor at
all.
parent a7bbd351
......@@ -34,7 +34,7 @@ domain ip {
# White-list access to Tor's SOCKSPort's
daddr 127.0.0.1 proto tcp syn dport 9050 {
mod owner uid-owner root ACCEPT;
mod owner uid-owner _apt ACCEPT;
mod owner uid-owner proxy ACCEPT;
mod owner uid-owner nobody ACCEPT;
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment