Add a dedicated user for the tor-launcher.

1 files changed, 13 insertions, 0 deletions

diff --git a/config/chroot_local-hooks/06-adduser_tor-launcher b/config/chroot_local-hooks/06-adduser_tor-launcher
new file mode 100755
index 0000000..f7beab1
--- /dev/null
+++ b/config/chroot_local-hooks/06-adduser_tor-launcher
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+set -e
+
+# Create the tor-launcher user.
+#
+# We run Tor Launcher under this user, and give it acces to Tor's
+# control port via adding it to the debian-tor group.
+
+echo "creating the tor-launcher user"
+
+adduser --system --quiet --group tor-launcher
+adduser tor-launcher debian-tor