Re: [tor-bugs] #23271 [Core Tor/Tor]: control_auth_cookie isn't deleted when tor stops

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#23271: control_auth_cookie isn't deleted when tor stops
--------------------------+-----------------------------------
 Reporter:  yurivict271   |          Owner:  (none)
     Type:  defect        |         Status:  needs_information
 Priority:  Medium        |      Milestone:  Tor: unspecified
Component:  Core Tor/Tor  |        Version:  Tor: 0.3.0.10
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+-----------------------------------

Comment (by yurivict271):

 > what risk does that file pose if its contents get disclosed?

 IMO, no risk. However, people might assume that control port is available
 since the cookie is still present. IMO, this is a minor defect that the
 file is left over when it isn't needed. This can create some confusion
 when it isn't needed to be that way.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23271#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs