nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-24 12:23:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Let recent relays run with the chutney sandbox.

Browse Source 
Fixes 16965
This commit is contained in:
Nick Mathewson 2015-09-02 09:59:50 -04:00
parent 910e25358a
commit f6bd8fbb80
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
changes/bug16965 Normal file
View File

@ -0,0 +1,4 @@
o Minor bugfixes (linux seccomp2 sandbox):
- Allow routers with ed25519 keys to run correctly under the seccomp2
sandbox. Fixes bug 16964; bugfix on 0.2.7.2-alpha.

14
src/or/main.c
View File

@ -3034,6 +3034,7 @@ sandbox_init_filter(void)
OPEN_DATADIR_SUFFIX("state", ".tmp");
OPEN_DATADIR_SUFFIX("unparseable-desc", ".tmp");
OPEN_DATADIR_SUFFIX("v3-status-votes", ".tmp");
OPEN_DATADIR("key-pinning-journal");
OPEN("/dev/srandom");
OPEN("/dev/urandom");
OPEN("/dev/random");
@ -3157,6 +3158,13 @@ sandbox_init_filter(void)
OPEN_DATADIR2("keys", "secret_onion_key.old");
OPEN_DATADIR2("keys", "secret_onion_key_ntor.old");
OPEN_DATADIR2_SUFFIX("keys", "ed25519_master_id_secret_key", ".tmp");
OPEN_DATADIR2_SUFFIX("keys", "ed25519_master_id_secret_key_encrypted",
".tmp");
OPEN_DATADIR2_SUFFIX("keys", "ed25519_master_id_public_key", ".tmp");
OPEN_DATADIR2_SUFFIX("keys", "ed25519_signing_secret_key", ".tmp");
OPEN_DATADIR2_SUFFIX("keys", "ed25519_signing_cert", ".tmp");
OPEN_DATADIR2_SUFFIX("stats", "bridge-stats", ".tmp");
OPEN_DATADIR2_SUFFIX("stats", "dirreq-stats", ".tmp");
@ -3187,6 +3195,12 @@ sandbox_init_filter(void)
RENAME_SUFFIX("hashed-fingerprint", ".tmp");
RENAME_SUFFIX("router-stability", ".tmp");
RENAME_SUFFIX2("keys", "ed25519_master_id_secret_key", ".tmp");
RENAME_SUFFIX2("keys", "ed25519_master_id_secret_key_encrypted", ".tmp");
RENAME_SUFFIX2("keys", "ed25519_master_id_public_key", ".tmp");
RENAME_SUFFIX2("keys", "ed25519_signing_secret_key", ".tmp");
RENAME_SUFFIX2("keys", "ed25519_signing_cert", ".tmp");
sandbox_cfg_allow_rename(&cfg,
get_datadir_fname2("keys", "secret_onion_key"),
get_datadir_fname2("keys", "secret_onion_key.old"));