<html><head></head><body><div class="ydpec4bb917yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div><div><span style="color: rgb(38, 40, 42); font-size: 13px;">On Sunday, January 30, 2022, 2:26:08 AM PST, Roman Mamedov <rm@romanrm.net> wrote:</span><br></div></div><div id="ydpec4bb917yahoo_quoted_3709052382" class="ydpec4bb917yahoo_quoted"><div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div><br></div>
<div>On Fri, 28 Jan 2022 19:58:49 -0700<br></div><div><div dir="ltr">David Fifield <<a shape="rect" href="mailto:david@bamsoftware.com" rel="nofollow" target="_blank">david@bamsoftware.com</a>> wrote:<br clear="none"><br clear="none">>> But a slight variation does work: make secret_onion_key.old and secret_onion_key_ntor.old *directories*, so that tor_rename cannot rename a file over them. It does result in an hourly `BUG` stack trace, but otherwise it seems effective.<br clear="none"><br clear="none">>> I did a test with two tor instances. The rot1 instance had the directory hack to prevent onion key rotation. The rot2 had nothing to prevent onion key rotation.<br clear="none"><br clear="none">> I did not follow the thread closely, but if you want a file or directory<br clear="none">contents unchangeable, and not allowed to rename/delete even by root, there's<br clear="none">the "immutable" attribute (chattr +i).<br clear="none"><br>I like the immutable attribute approach. It can be applied to the original secret_onion_key and secret_onion_key_ntor files.</div><div dir="ltr"><br></div><div dir="ltr">Appreciate the input.</div><div dir="ltr"><br></div><div dir="ltr">Respectfully,</div><div dir="ltr"><br></div><div dir="ltr"><br clear="none"><div class="ydpec4bb917yqt9301363636" id="ydpec4bb917yqtfd10235">Gary</div><div class="ydpec4bb917yqt9301363636" id="ydpec4bb917yqtfd10235"><span style="color: rgb(29, 34, 40); font-size: 16px;">—</span><br style="color: rgb(29, 34, 40); font-size: 16px;"><span style="color: rgb(29, 34, 40); font-size: 16px;">This Message Originated by the Sun.</span><br style="color: rgb(29, 34, 40); font-size: 16px;"><span style="color: rgb(29, 34, 40); font-size: 16px;">iBigBlue 63W Solar Array (~12 Hour Charge)</span><br style="color: rgb(29, 34, 40); font-size: 16px;"><span style="color: rgb(29, 34, 40); font-size: 16px;">+ 2 x Charmast 26800mAh Power Banks</span><br style="color: rgb(29, 34, 40); font-size: 16px;"><span style="color: rgb(29, 34, 40); font-size: 16px;">= iPhone XS Max 512GB (~2 Weeks Charged)</span><br></div></div></div>
</div>
</div></div></body></html>