Hi,

I need to run Tor Browser as another user…

So here what I’m doing under, MX Linux ( Debian, SysVinit, xfce)

#as root, in a terminal under xfce

useradd --create-home --system --shell /usr/sbin/nologin TorUser
# btw --system or not ?

tar -xf tor-browser-linux...tar -C /opt --totals
chown -R TorUser:TorUser /opt/tor-browser

runuser -u TorUser -- /opt/tor-browser/start-tor-browser.desktop

return

Launching ‘./Browser/start-tor-browser --detach’…

But nothing happen, and I don’t see any process for TorUser

any ideas ?

Posted on the offical Tor-browser in June, but no reactions so far… :/

  • mina86@lemmy.wtfEnglish
    5·
    4 days ago

    No, do not do that. This gives access to the display to anyone who can connect to it. The proper way is to give the user access to file whose path is in $XAUTHORITY.

    • Gordon_F@lemmy.mlOP
      1·
      3 days ago

      Thank you @mina86@lemmy.wtf I’ve look where point the $XAUTHORITY but it point to another user /home/<aUser>/.Xauthority and to give access to the file I have to change also the permission on the parent folders… not to hot to do so…

      I see also the TorUser do not have a file .Xauthority ! I’ve look how generate one for it, but I found no good documentation ! They show how do it once logged with TorUser ! but mine is not meant to be used to login on the system…

      • mina86@lemmy.wtfEnglish
        1·
        2 days ago

        You can just copy the file and set XAUTHORITY as necessary. Just make sure only the desired user can read it.

      • Gordon_F@lemmy.mlOP
        1·
        3 days ago

        I’ve try one guidance, but it didn’t worked.

        I quit the xfce, login as root, did

        echo $XAUTHORITY
#returned nothing

XAUTHORITY=/tmp/.Xauthority.tmp
xauth -f $XAUTHORITY generate :0 . trusted

        and after few minute it returned

        xauth: (argv):1 unable to open display :0 😢

        • kumi@feddit.onlineEnglish
          1·
          2 days ago

          Do you get a different result if you replace that :0 with your actual DISPLAY value?

          Also make sure you run that in a context that does have access to the x server (i guess keep your display manager running as you do this).

          Depending on your setup you should be running such commands as normal user instead of root.