[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3629 [arm]: Arm/Tor Deb Torrc Configuration

#3629: Arm/Tor Deb Torrc Configuration
-------------------------+--------------------------------------------------
 Reporter:  atagar       |          Owner:  ioerror 
     Type:  enhancement  |         Status:  assigned
 Priority:  normal       |      Milestone:          
Component:  arm          |        Version:          
 Keywords:               |         Parent:          
   Points:               |   Actualpoints:          
-------------------------+--------------------------------------------------
Changes (by atagar):

  * status:  accepted => assigned
  * owner:  atagar => ioerror


Comment:

 Added the arm hooks so this will be used by the wizard:
 https://gitweb.torproject.org/atagar/arm.git/commitdiff/ec49c74ba52d9410d6f108a4e76dfad063d40500

 If the user has run the --init argument (making the tor-arm user and
 /var/lib/tor-arm/torrc) then there's another option in the wizard called
 "Use System Instance" (defaulted to "Yes"). Having this option makes us...

 - Run override.py directly if arm's running as root (bad user, no
 biscuit!)
 - Run the setuid binary if it's available at '/usr/bin/torrc-override'
 - Otherwise attempt 'sudo -n' on override.py. We do a version check first
 since that option was *supposed* to be available starting with 1.7.0 (as
 per http://www.sudo.ws/pipermail/sudo-users/2009-January/003890.html) but
 that's a dirty lie. Ubuntu 9.10 uses 1.7.0 and even has the option in its
 man page, but it doesn't work so checking for 1.7.1 instead.
 - If everything above fails then logs a message asking the user to run the
 script manually with sudo.

 Since both the hook and torrc validation is done sending this back to Jake
 to check this version, address the 'setresuid' issue mentioned earlier,
 and see if it does what he wants for the setuid use case. I haven't
 exercised the final torrc replacement since I'm using Python 2.6.

 Cheers! -Damian

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3629#comment:20>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs