mirror repository of the tor core protocol in case of issues
Go to file
Jacob Appelbaum 2aac39a779 Implement DisableAllSwap to avoid putting secret info in page files.
This commit implements a new config option: 'DisableAllSwap'
This option probably only works properly when Tor is started as root.
We added two new functions: tor_mlockall() and tor_set_max_memlock().
tor_mlockall() attempts to mlock() all current and all future memory pages.
For tor_mlockall() to work properly we set the process rlimits for memory to
RLIM_INFINITY (and beyond) inside of tor_set_max_memlock().
We behave differently from mlockall() by only allowing tor_mlockall() to be
called one single time. All other calls will result in a return code of 1.
It is not possible to change DisableAllSwap while running.
A sample configuration item was added to the torrc.complete.in config file.
A new item in the man page for DisableAllSwap was added.
Thanks to Moxie Marlinspike and Chris Palmer for their feedback on this patch.

Please note that we make no guarantees about the quality of your OS and its
mlock/mlockall implementation. It is possible that this will do nothing at all.
It is also possible that you can ulimit the mlock properties of a given user
such that root is not required. This has not been extensively tested and is
unsupported. I have included some comments for possible ways we can handle
this on win32.
2009-10-27 04:28:40 -04:00
contrib Merge commit 'origin/maint-0.2.1' 2009-10-15 12:33:22 -04:00
debian Ship debian source with src/test/test.h 2009-10-11 10:39:49 +02:00
doc Implement DisableAllSwap to avoid putting secret info in page files. 2009-10-27 04:28:40 -04:00
src Implement DisableAllSwap to avoid putting secret info in page files. 2009-10-27 04:28:40 -04:00
Win32Build r8906@Kushana: nickm | 2006-09-21 21:23:22 -0400 2006-09-22 01:23:28 +00:00
.gitignore Move testing code into new src/test directory. 2009-09-23 00:24:43 -04:00
acinclude.m4 Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
AUTHORS r16997@catbus: nickm | 2007-12-06 18:56:33 -0500 2007-12-06 23:56:36 +00:00
autogen.sh r14641@catbus: nickm | 2007-08-17 17:53:14 -0400 2007-08-17 21:55:24 +00:00
ChangeLog Implement DisableAllSwap to avoid putting secret info in page files. 2009-10-27 04:28:40 -04:00
configure.in bump to 0.2.1.20 2009-10-15 12:14:18 -04:00
Doxyfile.in Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
INSTALL we changed autogen.sh's behavior, so update the INSTALL file 2008-01-23 19:08:53 +00:00
LICENSE Update the year for the copyright statement in two more files 2009-06-30 10:35:10 -04:00
Makefile.am Make "make test" depend on "all". 2009-09-23 00:24:43 -04:00
README update the (not very useful) readme 2008-12-07 23:41:10 +00:00
ReleaseNotes credit optimist for the bug 1038 diagnosis 2009-07-28 20:44:51 -04:00
tor.spec.in Merge commit 'origin/maint-0.2.1' 2009-06-12 11:27:48 -04:00

Tor protects your privacy on the internet by hiding the connection
between your Internet address and the services you use. We believe Tor
is reasonably secure, but please ensure you read the instructions and
configure it properly.

To build Tor from source:
        ./configure; make; make install

Home page:
        https://www.torproject.org/

Download new versions:
        https://www.torproject.org/download.html

Documentation, including links to installation and setup instructions:
        https://www.torproject.org/documentation.html

Making applications work with Tor:
        https://wiki.torproject.org/noreply/TheOnionRouter/TorifyHOWTO

Frequently Asked Questions:
        https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ