[tor-bugs] #13880 [arm]: arm produces torrc with DisableDebuggerAttachment 0?

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13880: arm produces torrc with DisableDebuggerAttachment 0?
--------------------+------------------------
 Reporter:  teor    |          Owner:  atagar
     Type:  defect  |         Status:  new
 Priority:  normal  |      Milestone:
Component:  arm     |        Version:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
--------------------+------------------------
 So, there is an unconfirmed report on #tor that arm produces torrc files
 with DisableDebuggerAttachment 0. If that is the case, and there's no
 reason for it, we should stop doing that.

 <teor> tim_: also, why DisableDebuggerAttachment 0?
 <tim_> teor, I have in my configs not sure where it came from. if it
 doesn't really do anything I can remove it
 <teor> tim_: it reduces security by enabling debugger attachment to the
 tor process. This can be used by an adversary to extract keys.
 <murb> tim_: do you use arm?
 <tim_> murb: yes i use arm. i think that is where it came from
 <teor> tim_: hmm, I'd consider that a bug in arm

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13880>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs