On Fri, Jun 23, 2017 at 09:57:31AM -0700, David Fifield wrote:
> I've just discovered a ticket in the Tor bug tracker about the same
> issue. The user there had upgraded to 0.2.7.6-1~d80.jessie+1 when the
> problem started occurring.
>
> "obfs4proxy cannot bind to <1024 port with systemd hardened service unit"
> https://bugs.torproject.org/18356
>
> However, the workaround suggested there (setting NoNewPrivileges=no) did
> not work for me. I set NoNewPrivileges=no in both
> /lib/systemd/system/tor/[email protected] and
> /lib/systemd/system/tor/[email protected].
Never mind that last point. Setting NoNewPrivileges=no *does* work. I
didn't know that I had to run `systemctl daemon-reload` after modifying
the service files and before restarting tor. With the reload, it works:
[notice] Registered server transport 'snowflake' at '[::]:443'
