[tor-bugs] #24979 [Core Tor/Torsocks]: torsocks could support ptrace sandboxing

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#24979: torsocks could support ptrace sandboxing
-----------------------------------+---------------------
     Reporter:  Hello71            |      Owner:  dgoulet
         Type:  enhancement        |     Status:  new
     Priority:  Low                |  Milestone:
    Component:  Core Tor/Torsocks  |    Version:
     Severity:  Normal             |   Keywords:
Actual Points:                     |  Parent ID:
       Points:                     |   Reviewer:
      Sponsor:                     |
-----------------------------------+---------------------
 pros:

 - 'fixes' SIP, suid, caps
 - fixes static binaries

 cons:

 - kind of a pain to implement
 - DNS would require actual parsing, which is apparently a hard problem
 even for 'minimal' implementations:
 https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-
 dhcp.html. I think an initial hybrid implementation could punt on this,
 and it would still fix the ugly hack of hardcoding SIP paths.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24979>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs