[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #22605 [Core Tor/Tor]: sandbox_intern_string(): Bug: No interned sandbox parameter found for /etc/tor/torrc.d/
#22605: sandbox_intern_string(): Bug: No interned sandbox parameter found for
/etc/tor/torrc.d/
---------------------------------+------------------------------------
Reporter: toralf | Owner: dgoulet
Type: defect | Status: accepted
Priority: High | Milestone: Tor: 0.3.1.x-final
Component: Core Tor/Tor | Version: Tor: 0.3.1.3-alpha
Severity: Normal | Resolution:
Keywords: sandbox, regression | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
---------------------------------+------------------------------------
Comment (by yawning):
Replying to [comment:10 Jigsaw52]:
> This means that the best thing that can be done in this case is to check
for all includes in the config files before setting up the sandbox and
include rules for those.
In the long term, there's certainly ways to make this work, but it will
involve using IPC and a separate process, or a separate sandboxing
mechanism for filesystem access. Either of those changes would be
objectively superior to what's done currently, but would be rather
involved.
> Reloading the configuration after adding more %includes or even more
files to already included folders will not be possible if the sandbox is
enabled.
Indeed. There's already certain preferences that are incompatible with
the sandbox all together, or with reloads, so supporting it to the limits
of the existing code and documenting the caveats may be sufficient.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22605#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs