[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #17391 [Tor]: torrc option "Sandbox 1" doesn't work in Tor v0.2.8.0-alpha-dev
#17391: torrc option "Sandbox 1" doesn't work in Tor v0.2.8.0-alpha-dev
-----------------------------+------------------------------
Reporter: TORques | Owner:
Type: enhancement | Status: new
Priority: Medium | Milestone: Tor: unspecified
Component: Tor | Version: Tor: unspecified
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Sponsor:
-----------------------------+------------------------------
I tried to run a Tor v0.2.8.0-alpha-dev mid relay in Linux 3.16.0-4-amd64
with the torrc option '''"Sandbox 1"''', but I only got this:
{{{
[warn] This version of Tor was built without support for sandboxing. To
build with support for sandboxing on Linux, you must have libseccomp and
its necessary header files (e.g. seccomp.h).
}}}
'''Seccomp''' is a feature of the Linux kernel that is enabled in (most)
contemporary Linux distributions. It restricts a thread to a small number
of system calls: '''read(), write(), exit() and sigreturn()''' - If the
thread calls any other system call, the entire process gets terminated.
now Seccomp is deprecated.
Starting with '''Linux 3.16''', the new '''seccomp.2 a.k.a. Seccomp-BPF'''
has a Berkeley Packet Filter (BPF) with optional allowed syscalls other
than the above mentioned four syscalls. At the developers choice and
according with the application specific tasks.
http://man7.org/linux/man-pages/man2/seccomp.2.html
1. I want to know if the tor code is updated and ready for using the
Seccomp-BPF to make the "Sandbox 1" operational and what exactly
prerequisites and additional compiling parameters are needed to compile
tor with the support for sandboxing.
Thank you.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17391>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs