[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #26910 [Core Tor/Tor]: Could tor drop privileges even earlier? (before trying to access anything on the filesystem beyond its torrc files)
#26910: Could tor drop privileges even earlier? (before trying to access anything
on the filesystem beyond its torrc files)
--------------------------+----------------------------------
Reporter: nusenu | Owner: (none)
Type: enhancement | Status: new
Priority: Medium | Milestone: Tor: unspecified
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------+----------------------------------
Changes (by weasel):
* cc: weasel (added)
Comment:
Yes, please.
The Debian service file still needs to give tor the CAP_DAC_READ_SEARCH
capability (which lets uid 0 override DAC file permissions for read/search
purposes) or else it falls flat on its face with hidden services (cf.
[https://bugs.debian.org/847598 Debian#847598]). We'd appreciate if Tor
did not need this elevated capability.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26910#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs