September 2014 - tor-commits - lists.torproject.org

[translation/tor-launcher-properties] Update translations for tor-launcher-properties
by translation＠torproject.org 03 Sep '14

03 Sep '14

commit 84269826bef7303c686be58c825088329c9c9543 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 3 21:45:30 2014 +0000 Update translations for tor-launcher-properties --- pt_BR/torlauncher.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pt_BR/torlauncher.properties b/pt_BR/torlauncher.properties index 0741ccb..e39ebbb 100644 --- a/pt_BR/torlauncher.properties +++ b/pt_BR/torlauncher.properties @@ -57,5 +57,5 @@ torlauncher.bootstrapWarning.resourcelimit=recursos insuficientes torlauncher.bootstrapWarning.identity=identidade conflitante torlauncher.bootstrapWarning.timeout=tempo limite da conexão excedido torlauncher.bootstrapWarning.noroute=sem rota para o host -torlauncher.bootstrapWarning.ioerror=erro de leitura/escrita +torlauncher.bootstrapWarning.ioerror=erro de leitura/gravação torlauncher.bootstrapWarning.pt_missing=transporte plugável ausente

1 0

r26942: {website} update TorBrowsers to 3.6.5 and 4.0-alpha-2 (website/trunk/include)
by Erinn Clark 03 Sep '14

03 Sep '14

Author: erinn Date: 2014-09-03 20:12:34 +0000 (Wed, 03 Sep 2014) New Revision: 26942 Modified: website/trunk/include/versions.wmi Log: update TorBrowsers to 3.6.5 and 4.0-alpha-2 Modified: website/trunk/include/versions.wmi =================================================================== --- website/trunk/include/versions.wmi 2014-09-03 05:26:53 UTC (rev 26941) +++ website/trunk/include/versions.wmi 2014-09-03 20:12:34 UTC (rev 26942) @@ -23,11 +23,11 @@ <define-tag version-osx-ppc-stable whitespace=delete>0.2.3.25</define-tag> <define-tag version-osx-ppc-alpha whitespace=delete>0.2.4.17-rc</define-tag> -<define-tag version-torbrowserbundledir whitespace=delete>3.6.4</define-tag> -<define-tag version-torbrowserbundlebetadir whitespace=delete>4.0-alpha-1</define-tag> +<define-tag version-torbrowserbundledir whitespace=delete>3.6.5</define-tag> +<define-tag version-torbrowserbundlebetadir whitespace=delete>4.0-alpha-2</define-tag> -<define-tag version-torbrowserbundle whitespace=delete>3.6.4</define-tag> -<define-tag version-torbrowserbundlebeta whitespace=delete>4.0-alpha-1</define-tag> +<define-tag version-torbrowserbundle whitespace=delete>3.6.5</define-tag> +<define-tag version-torbrowserbundlebeta whitespace=delete>4.0-alpha-2</define-tag> <define-tag version-torbrowser-tor whitespace=delete>0.2.4.19</define-tag> <define-tag version-torbrowser-tor-components whitespace=delete>libevent-2.0.21-stable, zlib-1.2.8, openssl-1.0.1e</define-tag> <define-tag version-torbrowser-firefox whitespace=delete>24.2.0esr</define-tag> @@ -37,19 +37,19 @@ <define-tag version-torbrowser-vidalia whitespace=delete>0.2.21</define-tag> <define-tag version-torimbrowserbundle whitespace=delete>1.3.21</define-tag> -<define-tag version-torbrowserbundlelinux32 whitespace=delete>3.6.4</define-tag> -<define-tag version-torbrowserbundlelinux64 whitespace=delete>3.6.4</define-tag> -<define-tag version-torbrowserbundlelinux32beta whitespace=delete>4.0-alpha-1</define-tag> -<define-tag version-torbrowserbundlelinux64beta whitespace=delete>4.0-alpha-1</define-tag> +<define-tag version-torbrowserbundlelinux32 whitespace=delete>3.6.5</define-tag> +<define-tag version-torbrowserbundlelinux64 whitespace=delete>3.6.5</define-tag> +<define-tag version-torbrowserbundlelinux32beta whitespace=delete>4.0-alpha-2</define-tag> +<define-tag version-torbrowserbundlelinux64beta whitespace=delete>4.0-alpha-2</define-tag> <define-tag version-gnu-torbrowser-tor whitespace=delete>0.2.4.19</define-tag> <define-tag version-gnu-torbrowser-tor-components whitespace=delete>libevent-2.0.21-stable, zlib-1.2.8, openssl-1.0.0k</define-tag> <define-tag version-gnu-torbrowser-firefox whitespace=delete>24.2.0esr</define-tag> <define-tag version-gnu-torbrowser-torbutton whitespace=delete>1.5.2</define-tag> <define-tag version-gnu-torbrowser-vidalia whitespace=delete>0.2.21</define-tag> -<define-tag version-torbrowserbundleosx32 whitespace=delete>3.6.4</define-tag> +<define-tag version-torbrowserbundleosx32 whitespace=delete>3.6.5</define-tag> <define-tag version-torbrowserbundleosx64 whitespace=delete>2.3.25-15</define-tag> -<define-tag version-torbrowserbundleosx32beta whitespace=delete>4.0-alpha-1</define-tag> +<define-tag version-torbrowserbundleosx32beta whitespace=delete>4.0-alpha-2</define-tag> <define-tag version-osx-torbrowser-tor whitespace=delete>0.2.4.19</define-tag> <define-tag version-osx-torbrowser-firefox whitespace=delete>24.2.0esr</define-tag> <define-tag version-osx-torbrowser-torbutton whitespace=delete>1.5.2</define-tag>

1 0

[tor/release-0.2.5] Recategorize a couple of items in the changelogs
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit 32c5806e1c4cb4c096ae7c2f73c0a92183779656 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 3 13:53:22 2014 -0400 Recategorize a couple of items in the changelogs --- ChangeLog | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index aac5a82..392b8c2 100644 --- a/ChangeLog +++ b/ChangeLog @@ -17,12 +17,6 @@ Changes in version 0.2.5.7-beta - 2014-09-?? - Avoid queuing or sending destroy cells for circuit ID zero when we fail to send a CREATE cell. Fixes bug 12848; bugfix on 0.0.8pre1. Found and fixed by "cypherpunks". - - Downgrade "Unexpected onionskin length after decryption" warning - to a protocol-warn, since there's nothing relay operators can do - about a client that sends them a malformed create cell. Resolves - bug 12996; bugfix on 0.0.6rc1. - - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS - cell on a cannibalized or non-OR circuit. Resolves ticket 12997. o Minor features (bridge): - Add an ExtORPortCookieAuthFileGroupReadable option to make the @@ -32,6 +26,14 @@ Changes in version 0.2.5.7-beta - 2014-09-?? - Update geoip and geoip6 to the August 7 2014 Maxmind GeoLite2 Country database. + o Minor bugfixes (relay): + - Downgrade "Unexpected onionskin length after decryption" warning + to a protocol-warn, since there's nothing relay operators can do + about a client that sends them a malformed create cell. Resolves + bug 12996; bugfix on 0.0.6rc1. + - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS + cell on a cannibalized or non-OR circuit. Resolves ticket 12997. + o Minor bugfixes (controller): - Restore the functionality of CookieAuthFileGroupReadable. Fixes bug 12864; bugfix on 0.2.5.1-alpha.

1 0

[tor/release-0.2.5] Fold new entries into 0.2.5.7 changelog
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit 43bf511c31d712989e267ee8ccbad80ae5ed7c12 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 3 13:50:10 2014 -0400 Fold new entries into 0.2.5.7 changelog --- ChangeLog | 21 ++++++++++++++++++++- changes/bug12878 | 3 --- changes/bug12948 | 8 -------- changes/bug12996 | 5 ----- changes/bug12997 | 3 --- changes/ticket13036 | 5 ----- 6 files changed, 20 insertions(+), 25 deletions(-) diff --git a/ChangeLog b/ChangeLog index 2800351..d729e38 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,15 +1,28 @@ -Changes in version 0.2.5.7-beta - 2014-08-?? +Changes in version 0.2.5.7-beta - 2014-09-?? o Major bugfixes (client, startup): - When Tor starts with DisabledNetwork set, it would correctly conclude that it shouldn't try making circuits, but it would mistakenly cache this conclusion and continue believing it even when DisableNetwork is set to 0. Fixes the bug introduced by the fix for bug 11200; bugfix on 0.2.5.4-alpha. + - Resume expanding abbreviations for command-line options. The fix + for bug 4647 accidentally removed our hack from bug 586 that rewrote + HashedControlPassword to __HashedControlSessionPassword when it + appears on the commandline (which allowed the user to set her + own HashedControlPassword in the torrc file while the controller + generates a fresh session password for each run). Fixes bug 12948; + bugfix on 0.2.5.1-alpha. o Major bugfixes (relay): - Avoid queuing or sending destroy cells for circuit ID zero when we fail to send a CREATE cell. Fixes bug 12848; bugfix on 0.0.8pre1. Found and fixed by "cypherpunks". + - Downgrade "Unexpected onionskin length after decryption" warning + to a protocol-warn, since there's nothing relay operators can do + about a client that sends them a malformed create cell. Resolves + bug 12996; bugfix on 0.0.6rc1. + - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS cell + on a cannibalized or non-OR circuit. Resolves ticket 12997. o Minor features (bridge): - Add an ExtORPortCookieAuthFileGroupReadable option to make the @@ -28,6 +41,10 @@ Changes in version 0.2.5.7-beta - 2014-08-?? Fixes bug 12693; bugfix on 0.2.5.2-alpha. - Fix compilation of test.h with MSVC. Patch from Gisle Vanem; bugfix on 0.2.5.5-alpha. + - Fix a large number of false positive warnings from the clang + analyzer static analysis tool. This should make real warnings + easier for clang analyzer to find. Patch from "teor". Closes + ticket 13036. o Distribution (systemd): - Verify configuration file via ExecStartPre in the systemd unit @@ -45,6 +62,8 @@ Changes in version 0.2.5.7-beta - 2014-08-?? - Adjust the URLs in the README to refer to the new locations of several documents on the website. Patch from Matt Pagan. Fixes bug 12830. + - Document 'reject6' and 'accept6' ExitPolicy entries. Resolves + ticket 12878. Changes in version 0.2.5.6-alpha - 2014-07-28 diff --git a/changes/bug12878 b/changes/bug12878 deleted file mode 100644 index a05fc44..0000000 --- a/changes/bug12878 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Document 'reject6' and 'accept6' ExitPolicy entries. Resolves - ticket 12878. diff --git a/changes/bug12948 b/changes/bug12948 deleted file mode 100644 index 431c0a1..0000000 --- a/changes/bug12948 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes: - - Resume expanding abbreviations for command-line options. The fix - for bug 4647 accidentally removed our hack from bug 586 that rewrote - HashedControlPassword to __HashedControlSessionPassword when it - appears on the commandline (which allowed the user to set her - own HashedControlPassword in the torrc file while the controller - generates a fresh session password for each run). Fixes bug 12948; - bugfix on 0.2.5.1-alpha. diff --git a/changes/bug12996 b/changes/bug12996 deleted file mode 100644 index 4b4fb0d..0000000 --- a/changes/bug12996 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - Downgrade "Unexpected onionskin length after decryption" warning - to a protocol-warn, since there's nothing relay operators can do - about a client that sends them a malformed create cell. Resolves - bug 12996; bugfix on 0.0.6rc1. diff --git a/changes/bug12997 b/changes/bug12997 deleted file mode 100644 index fb6e7a8..0000000 --- a/changes/bug12997 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features: - - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS cell - on a cannibalized or non-OR circuit. Resolves ticket 12997. diff --git a/changes/ticket13036 b/changes/ticket13036 deleted file mode 100644 index 1b47843..0000000 --- a/changes/ticket13036 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - Fix a large number of false positive warnings from the clang - analyzer static analysis tool. This should make real warnings - easier for clang analyzer to find. Patch from "teor". Closes - ticket 13036.

1 0

[tor/release-0.2.5] Reflow changelog
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit 37516391bee0700d01478ed5fbda71096ec16599 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 3 13:51:04 2014 -0400 Reflow changelog --- ChangeLog | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index d729e38..aac5a82 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,12 +6,12 @@ Changes in version 0.2.5.7-beta - 2014-09-?? when DisableNetwork is set to 0. Fixes the bug introduced by the fix for bug 11200; bugfix on 0.2.5.4-alpha. - Resume expanding abbreviations for command-line options. The fix - for bug 4647 accidentally removed our hack from bug 586 that rewrote - HashedControlPassword to __HashedControlSessionPassword when it - appears on the commandline (which allowed the user to set her - own HashedControlPassword in the torrc file while the controller - generates a fresh session password for each run). Fixes bug 12948; - bugfix on 0.2.5.1-alpha. + for bug 4647 accidentally removed our hack from bug 586 that + rewrote HashedControlPassword to __HashedControlSessionPassword + when it appears on the commandline (which allowed the user to set + her own HashedControlPassword in the torrc file while the + controller generates a fresh session password for each run). Fixes + bug 12948; bugfix on 0.2.5.1-alpha. o Major bugfixes (relay): - Avoid queuing or sending destroy cells for circuit ID zero when we @@ -21,8 +21,8 @@ Changes in version 0.2.5.7-beta - 2014-09-?? to a protocol-warn, since there's nothing relay operators can do about a client that sends them a malformed create cell. Resolves bug 12996; bugfix on 0.0.6rc1. - - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS cell - on a cannibalized or non-OR circuit. Resolves ticket 12997. + - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS + cell on a cannibalized or non-OR circuit. Resolves ticket 12997. o Minor features (bridge): - Add an ExtORPortCookieAuthFileGroupReadable option to make the

1 0

[tor/release-0.2.5] Merge remote-tracking branch 'origin/maint-0.2.5' into release-0.2.5
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit 06e8f4b370b4ddf096482dafb64ad7f394cbd28a Merge: 475c95f dcb4ee5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 3 13:46:31 2014 -0400 Merge remote-tracking branch 'origin/maint-0.2.5' into release-0.2.5 doc/tor.1.txt | 5 +++++ 1 file changed, 5 insertions(+)

1 0

[tor/release-0.2.5] Documenting reject6 and accept6 ExitPolicy entries in manpage.
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit dcb4ee5b83b69234ef8fd0fce8533ab1c4434bd9 Author: rl1987 <rl1987(a)sdf.lonestar.org> Date: Sun Aug 31 14:09:06 2014 +0300 Documenting reject6 and accept6 ExitPolicy entries in manpage. --- doc/tor.1.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 04d13fb..8d51f6e 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1493,6 +1493,11 @@ is non-zero): public (external) IP address. See RFC 1918 and RFC 3330 for more details about internal and reserved IP address space. + + + Tor also allow IPv6 exit policy entries. For instance, "reject6 [FC00::]/7:*" + rejects all destinations that share 7 most significant bit prefix with + address FC00::. Respectively, "accept6 [C000::]/3:*" accepts all destinations + that share 3 most significant bit prefix with address C000::. + + + This directive can be specified multiple times so you don't have to put it all on one line. + +

1 0

[tor/master] Merge remote-tracking branch 'intrigeri/bug12751-systemd-filesystem-sandbox'
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit f58cdb3be70ef7b30875efe5c2894efc4e273953 Merge: ed8f020 9f0161f Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 3 13:28:46 2014 -0400 Merge remote-tracking branch 'intrigeri/bug12751-systemd-filesystem-sandbox' changes/bug12751-systemd-filesystem-sandbox | 5 +++++ contrib/dist/tor.service.in | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/master] Add changes file for #12751.
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit 9f0161f73db38ab0cf849dcca66f645d3036d9a9 Author: intrigeri <intrigeri(a)boum.org> Date: Wed Aug 27 03:13:32 2014 +0000 Add changes file for #12751. --- changes/bug12751-systemd-filesystem-sandbox | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/changes/bug12751-systemd-filesystem-sandbox b/changes/bug12751-systemd-filesystem-sandbox new file mode 100644 index 0000000..0abaa4c --- /dev/null +++ b/changes/bug12751-systemd-filesystem-sandbox @@ -0,0 +1,5 @@ + o Distribution: + - systemd unit file: only allow tor to write to /var/lib/tor + and /var/log/tor. The rest of the filesystem is accessible + for reading only. + Patch by intrigeri; resolves ticket 12751.

1 0

[tor/master] systemd unit file: ensures that the process and all its children can never gain
by nickm＠torproject.org 03 Sep '14

03 Sep '14

commit b4170421cc58d8c57254f4224ba259e817f48869 Author: intrigeri <intrigeri(a)boum.org> Date: Wed Aug 27 03:18:26 2014 +0000 systemd unit file: ensures that the process and all its children can never gain new privileges (#12939). --- contrib/dist/tor.service.in | 1 + 1 file changed, 1 insertion(+) diff --git a/contrib/dist/tor.service.in b/contrib/dist/tor.service.in index 2fe51c7..c4709a7 100644 --- a/contrib/dist/tor.service.in +++ b/contrib/dist/tor.service.in @@ -19,6 +19,7 @@ PrivateTmp = yes DeviceAllow = /dev/null rw DeviceAllow = /dev/urandom r InaccessibleDirectories = /home +NoNewPrivileges = yes [Install] WantedBy = multi-user.target

1 0