tor-commits December 2016

tor-commits@lists.torproject.org

18 participants
2010 discussions

[tor-messenger-build/master] Release version 0.3.0b2
by sukhbir＠torproject.org 29 Dec '16

29 Dec '16

commit 6a98d5868bd000559b2c8c95ae46c0eac0125898 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Thu Dec 29 08:50:27 2016 -0500 Release version 0.3.0b2 --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index d7f714b..7b3f643 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Tor Messenger 0.3.0b2 -- +Tor Messenger 0.3.0b2 -- December 29, 2016 * All Platforms * Use the tor-browser-45.6.0esr-6.0-1-build1 tag on … [View More]

1 0

[sandboxed-tor-browser/master] Minor tweaks to the "something in progress" dialog box.
by yawning＠torproject.org 29 Dec '16

29 Dec '16

commit a249097af81e0f5064422d19451ed7d64574d14c Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Thu Dec 29 08:37:41 2016 +0000 Minor tweaks to the "something in progress" dialog box. Mostly just adjusting the margins slightly in the hopes of making it look somewhat better. --- ChangeLog | 1 + data/ui/gtkui.ui | 9 +++++---- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index 4f3a908..7b7f170 100644 --- a/ChangeLog … [View More]

1 0

[sandboxed-tor-browser/master] Bug 21093: Unbreak the Debian build, by kludging gosecco.
by yawning＠torproject.org 29 Dec '16

29 Dec '16

commit 6abb6a299971df82f2eb481e7336c3c0122d37f9 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Thu Dec 29 01:30:00 2016 +0000 Bug 21093: Unbreak the Debian build, by kludging gosecco. gosecco has code to load seccomp filters with the Linux 3.17 system call, but certain copies of the debian headers pre-date the introduction of this. Disabling all the calls is harmless since all gosecco is used for is parsing and copiling rules, and the disabled … [View More]routines are for using the library to install the filter (which we offload to bubblewrap). Note: Why yes, this is a repeat of 3b568bda74. --- .../src/github.com/twtiger/gosecco/native/calls.go | 41 ++++++++++++++++++++++ 1 file changed, 41 insertions(+) diff --git a/vendor/src/github.com/twtiger/gosecco/native/calls.go b/vendor/src/github.com/twtiger/gosecco/native/calls.go index 2a6c66d..fb69f6b 100644 --- a/vendor/src/github.com/twtiger/gosecco/native/calls.go +++ b/vendor/src/github.com/twtiger/gosecco/native/calls.go @@ -1,5 +1,45 @@ package native +// XXX/Yawning: Debian still ships 3.16, and all sandboxed-tor-browser uses this +// for is the compiler anyway. + +import ( + "fmt" + + "github.com/twtiger/gosecco/data" +) + +// InstallSeccomp will install seccomp using native methods +func InstallSeccomp(prog *data.SockFprog) error { + return fmt.Errorf("BUG: sandboxed-tor-browser called native.InstallSeccomp") +} + +// NoNewPrivs will use prctl to stop new privileges using native methods +func NoNewPrivs() error { + return fmt.Errorf("BUG: sandboxed-tor-browser called native.NoNewPrivs") +} + +// CheckGetSeccomp will check if we have seccomp available +func CheckGetSeccomp() error { + return fmt.Errorf("BUG: sandboxed-tor-browser called native.CheckGetSeccomp") +} + +// CheckSetSeccompModeFilter will check if we have seccomp mode filter available +func CheckSetSeccompModeFilter() error { + return fmt.Errorf("BUG: sandboxed-tor-browser called native.CheckSetSeccompModeFilter") +} + +// CheckSetSeccompModeFilterWithSeccomp will check if we have the seccomp syscall available +func CheckSetSeccompModeFilterWithSeccomp() error { + return fmt.Errorf("BUG: sandboxed-tor-browser called native.CheckSetSeccompModeFilterWithSeccomp") +} + +// CheckSetSeccompModeTsync will check that we can set tsync +func CheckSetSeccompModeTsync() error { + return fmt.Errorf("BUG: sandboxed-tor-browser called native.CheckSetSeccompModeTsync") +} + +/* import ( "syscall" "unsafe" @@ -68,3 +108,4 @@ func CheckSetSeccompModeFilterWithSeccomp() error { func CheckSetSeccompModeTsync() error { return seccomp(C.SECCOMP_SET_MODE_FILTER, C.SECCOMP_FILTER_FLAG_TSYNC, nil) } +*/ [View Less]

1 0

[sandboxed-tor-browser/master] Bug 21093: Go back to using gosecco for seccomp rule compilation.
by yawning＠torproject.org 29 Dec '16

29 Dec '16

commit c3a280dc1210c679cf7324f76d8f023a3feb4750 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Thu Dec 29 02:18:02 2016 +0000 Bug 21093: Go back to using gosecco for seccomp rule compilation. This means that there is no longer a dependency on libseccomp at all, yay. --- .gitignore | 1 - ChangeLog | 1 + Makefile | 6 +- README.md … [View More]

1 0

[sandboxed-tor-browser/master] Bug 21093: Import gosecco and it's dependency.
by yawning＠torproject.org 29 Dec '16

29 Dec '16

commit 3f082d19fa8ab728f4c4b4d09011af7b81376731 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Thu Dec 29 01:25:15 2016 +0000 Bug 21093: Import gosecco and it's dependency. Upstream commit: 81110d334ed7a530d99ad620375855246f21d524 --- vendor/manifest | 13 + vendor/src/github.com/twtiger/gosecco/Dockerfile | 10 + vendor/src/github.com/twtiger/gosecco/LICENSE | 661 ++++++ vendor/src/github.com/twtiger/gosecco/… [View More]

1 0

[sandboxed-tor-browser/master] Bug 20940: Deprecate x86 support.
by yawning＠torproject.org 29 Dec '16

29 Dec '16

commit 194d51e8cedd1d8f4846f24c69d7da5f6d1c0018 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Wed Dec 28 07:15:02 2016 +0000 Bug 20940: Deprecate x86 support. This removes support for 32 bit Intel systems, but leaves the awkward two stage build process in place for now. Going back to gosecco will follow next. --- ChangeLog | 1 + README.md | 2 +- data/ui/channels.json … [View More] | 3 +- src/cmd/gen-seccomp/main.go | 33 +--- src/cmd/gen-seccomp/seccomp.go | 33 +--- src/cmd/gen-seccomp/seccomp_firefox.go | 97 +----------- src/cmd/gen-seccomp/seccomp_tor.go | 166 +++++---------------- .../sandboxed-tor-browser/internal/dynlib/cache.go | 35 +---- .../sandboxed-tor-browser/internal/dynlib/hwcap.go | 31 ---- .../sandboxed-tor-browser/internal/dynlib/ldso.go | 7 +- .../internal/sandbox/application.go | 12 +- .../internal/ui/config/config.go | 2 - 12 files changed, 53 insertions(+), 369 deletions(-) diff --git a/ChangeLog b/ChangeLog index dbde25a..8bcc45b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,5 @@ Changes in version 0.0.3 - UNRELEASED: + * Bug 20940: Deprecate x86 support. * Bug 20778: Check for updates in the background. * Bug 20851: If the incremental update fails, fall back to the complete update. diff --git a/README.md b/README.md index 4b70efd..badb125 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ Qubes, Subgraph or Tails. Runtime dependencies: - * A modern Linux system on x86/x86_64 architecture. + * A modern Linux system on x86_64 architecture. * bubblewrap >= 0.1.3 (https://github.com/projectatomic/bubblewrap). * Gtk+ >= 3.14.0 * (Optional) PulseAudio diff --git a/data/ui/channels.json b/data/ui/channels.json index 75c237f..8e78f46 100644 --- a/data/ui/channels.json +++ b/data/ui/channels.json @@ -1,4 +1,3 @@ { - "linux64": [ "release", "alpha", "hardened" ], - "linux32": [ "release", "alpha" ] + "linux64": [ "release", "alpha", "hardened" ] } diff --git a/src/cmd/gen-seccomp/main.go b/src/cmd/gen-seccomp/main.go index 5dcbbf2..8216166 100644 --- a/src/cmd/gen-seccomp/main.go +++ b/src/cmd/gen-seccomp/main.go @@ -37,7 +37,7 @@ func main() { if err != nil { log.Fatalf("failed to create output: %v", err) } - if err = compileTorSeccompProfile(f, false, false); err != nil { + if err = compileTorSeccompProfile(f, false); err != nil { log.Fatalf("failed to create tor amd64 profile: %v", err) } @@ -46,7 +46,7 @@ func main() { if err != nil { log.Fatalf("failed to create output: %v", err) } - if err = compileTorSeccompProfile(f, true, false); err != nil { + if err = compileTorSeccompProfile(f, true); err != nil { log.Fatalf("failed to create tor-obfs4 amd64 profile: %v", err) } @@ -55,34 +55,7 @@ func main() { if err != nil { log.Fatalf("failed to create output: %v", err) } - if err = compileTorBrowserSeccompProfile(f, false); err != nil { + if err = compileTorBrowserSeccompProfile(f); err != nil { log.Fatalf("failed to create firefox amd64 profile: %v", err) } - - // Tor Browser (386) - f, err = os.Create(filepath.Join(outDir, "tor-386.bpf")) - if err != nil { - log.Fatalf("failed to create output: %v", err) - } - if err = compileTorSeccompProfile(f, false, true); err != nil { - log.Fatalf("failed to create tor 386 profile: %v", err) - } - - // Tor Browser + obfs4proxy (386) - f, err = os.Create(filepath.Join(outDir, "tor-obfs4-386.bpf")) - if err != nil { - log.Fatalf("failed to create output: %v", err) - } - if err = compileTorSeccompProfile(f, true, true); err != nil { - log.Fatalf("failed to create tor-obfs4 386 profile: %v", err) - } - - // Firefox (386) - f, err = os.Create(filepath.Join(outDir, "torbrowser-386.bpf")) - if err != nil { - log.Fatalf("failed to create output: %v", err) - } - if err = compileTorBrowserSeccompProfile(f, true); err != nil { - log.Fatalf("failed to create firefox 386 profile: %v", err) - } } diff --git a/src/cmd/gen-seccomp/seccomp.go b/src/cmd/gen-seccomp/seccomp.go index ece1e7e..b016f4c 100644 --- a/src/cmd/gen-seccomp/seccomp.go +++ b/src/cmd/gen-seccomp/seccomp.go @@ -66,43 +66,16 @@ const ( fionread = 0x541b tcgets = 0x5401 tiocgpgrp = 0x540f - - // socketcall() call numbers (linux/net.h) - sysSocket = 1 // sys_socket() - sysBind = 2 // sys_bind() - sysConnect = 3 // sys_connect() - sysListen = 4 // sys_listen() - sysAccept = 5 // sys_accept() - sysGetsockname = 6 // sys_getsockname() - sysGetpeername = 7 // sys_getpeername() - sysSocketpair = 8 // sys_socketpair() - sysSend = 9 // sys_send() - sysRecv = 10 // sys_recv() - sysSendto = 11 // sys_sendto() - sysRecvfrom = 12 // sys_recvfrom() - sysShutdown = 13 // sys_shutdown() - sysSetsockopt = 14 // sys_setsockopt() - sysGetsockopt = 15 // sys_getsockopt() - sysSendmsg = 16 // sys_sendmsg() - sysRecvmsg = 17 // sys_recvmsg() - sysAccept4 = 18 // sys_accept4() - sysRecvmmsg = 19 // sys_recvmmsg - sysSendmmsg = 20 // sys_sendmmsg ) -func newWhitelist(is386 bool) (*seccomp.ScmpFilter, error) { - arch := seccomp.ArchAMD64 - if is386 { - arch = seccomp.ArchX86 - } - +func newWhitelist() (*seccomp.ScmpFilter, error) { actENOSYS := seccomp.ActErrno.SetReturnCode(38) f, err := seccomp.NewFilter(actENOSYS) if err != nil { return nil, err } - if err = f.AddArch(arch); err != nil { + if err = f.AddArch(seccomp.ArchAMD64); err != nil { f.Release() return nil, err } @@ -113,7 +86,7 @@ func newWhitelist(is386 bool) (*seccomp.ScmpFilter, error) { return f, nil } -func allowSyscalls(f *seccomp.ScmpFilter, calls []string, is386 bool) error { +func allowSyscalls(f *seccomp.ScmpFilter, calls []string) error { for _, scallName := range calls { scall, err := seccomp.GetSyscallFromName(scallName) if err != nil { diff --git a/src/cmd/gen-seccomp/seccomp_firefox.go b/src/cmd/gen-seccomp/seccomp_firefox.go index b47e35b..427c5f9 100644 --- a/src/cmd/gen-seccomp/seccomp_firefox.go +++ b/src/cmd/gen-seccomp/seccomp_firefox.go @@ -19,14 +19,12 @@ package main import ( "os" "syscall" - - seccomp "github.com/seccomp/libseccomp-golang" ) -func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { +func compileTorBrowserSeccompProfile(fd *os.File) error { defer fd.Close() - f, err := newWhitelist(is386) + f, err := newWhitelist() if err != nil { return err } @@ -190,54 +188,10 @@ func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { // "personality", // "mlock", } - if is386 { - allowedNoArgs386 := []string{ - "fadvise64_64", - "fcntl64", - "fstat64", - "fstatfs64", - "ftruncate64", - "lstat64", - "stat64", - "statfs64", - "_llseek", - - "mmap2", - "ugetrlimit", - "set_thread_area", - "waitpid", - - "getgid32", - "getuid32", - "getresgid32", - "getresuid32", - - "recv", - "send", - "_newselect", - } - allowedNoArgs = append(allowedNoArgs, allowedNoArgs386...) - } - if err = allowSyscalls(f, allowedNoArgs, is386); err != nil { + if err = allowSyscalls(f, allowedNoArgs); err != nil { return err } - // Like with how I do the tor rules, handle socketcall() before everything - // else. - if is386 { - if err = ffFilterSocketcall(f); err != nil { - return err - } - - // Unrelated to sockets, only i386 needs these, and it can be filtered. - if err = allowCmpEq(f, "time", 0, 0); err != nil { - return err - } - if err = ffFilterPrlimit64(f); err != nil { - return err - } - } - // Because we patch PulseAudio's mutex creation, we can omit all PI futex // calls. if err = allowCmpEq(f, "futex", 1, futexWait, futexWaitPrivate, futexWakePrivate, futexCmpRequeuePrivate, futexWakeOpPrivate, futexWaitBitsetPrivate|futexClockRealtime, futexWake, futexWaitBitsetPrivate); err != nil { @@ -259,48 +213,3 @@ func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { return f.ExportBPF(fd) } - -func ffFilterSocketcall(f *seccomp.ScmpFilter) error { - // This is kind of pointless because it allows basically all the things. - allowedCalls := []uint64{ - sysSocket, - sysBind, - sysConnect, - sysListen, - sysGetsockname, - sysGetpeername, - sysSocketpair, - sysSend, - sysRecv, - sysSendto, - sysRecvfrom, - sysShutdown, - sysSetsockopt, - sysGetsockopt, - sysSendmsg, - sysRecvmsg, - sysAccept4, - } - return allowCmpEq(f, "socketcall", 0, allowedCalls...) -} - -func ffFilterPrlimit64(f *seccomp.ScmpFilter) error { - scall, err := seccomp.GetSyscallFromName("prlimit64") - if err != nil { - return err - } - - // Per Mozilla's sandbox: only prlimit64(0, resource, NULL, old_limit) - // which is functionally equivalent to getrlimit(). 0 instead of the - // pid() is a glibc-ism. - - isPid0, err := seccomp.MakeCondition(0, seccomp.CompareEqual, 0) - if err != nil { - return err - } - isNoNewLimit, err := seccomp.MakeCondition(2, seccomp.CompareEqual, 9) - if err != nil { - return err - } - return f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isPid0, isNoNewLimit}) -} diff --git a/src/cmd/gen-seccomp/seccomp_tor.go b/src/cmd/gen-seccomp/seccomp_tor.go index 26b4b14..e6501e3 100644 --- a/src/cmd/gen-seccomp/seccomp_tor.go +++ b/src/cmd/gen-seccomp/seccomp_tor.go @@ -25,10 +25,10 @@ import ( var maskedCloexecNonblock = ^(uint64(syscall.SOCK_CLOEXEC | syscall.SOCK_NONBLOCK)) -func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { +func compileTorSeccompProfile(fd *os.File, useBridges bool) error { defer fd.Close() - f, err := newWhitelist(is386) + f, err := newWhitelist() if err != nil { return err } @@ -106,34 +106,9 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { "readlink", // ASAN needs this. } - if is386 { - allowedNoArgs386 := []string{ - "fstat64", - "getegid32", - "geteuid32", - "getgid32", - "getuid32", - "_llseek", - "sigreturn", - - "recv", - "send", - "stat64", - - "ugetrlimit", - "set_thread_area", - } - allowedNoArgs = append(allowedNoArgs, allowedNoArgs386...) - } - if err = allowSyscalls(f, allowedNoArgs, is386); err != nil { + if err = allowSyscalls(f, allowedNoArgs); err != nil { return err } - if is386 { - // Handle socketcall() before filtering other things. - if err = torFilterSocketcall(f, useBridges); err != nil { - return err - } - } if err = allowCmpEq(f, "time", 0, 0); err != nil { return err @@ -183,10 +158,10 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { if err = torFilterSocketpair(f); err != nil { return err } - if err = torFilterMmap(f, is386); err != nil { + if err = torFilterMmap(f); err != nil { return err } - if err = torFilterFcntl(f, is386); err != nil { + if err = torFilterFcntl(f); err != nil { return err } @@ -203,10 +178,7 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { "getpeername", "getppid", } - if is386 { - obfsCalls = append(obfsCalls, "_newselect") - } - if err = allowSyscalls(f, obfsCalls, is386); err != nil { + if err = allowSyscalls(f, obfsCalls); err != nil { return err } @@ -223,7 +195,7 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { if err = obfsFilterSetsockopt(f); err != nil { return err } - if err = obfsFilterMmap(f, is386); err != nil { + if err = obfsFilterMmap(f); err != nil { return err } } @@ -231,40 +203,6 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { return f.ExportBPF(fd) } -func torFilterSocketcall(f *seccomp.ScmpFilter, useBridges bool) error { - // This interface needs to die in a fire, because it's leaving - // gaping attack surface. It kind of will assuming that things - // move on to 4.3 or later. - // - // Emperically on Fedora 25 getsockopt and setsockopt still are - // multiplexed, though that may just be my rules or libseccomp2. - // - // Re-test after Debian stable moves to a modern kernel. - - allowedCalls := []uint64{ - sysSocket, - sysBind, - sysConnect, - sysListen, - sysGetsockname, - sysSocketpair, - sysSend, - sysRecv, - sysSendto, - sysRecvfrom, - sysSetsockopt, - sysGetsockopt, - sysSendmsg, - sysRecvmsg, - sysAccept4, - } - if useBridges { - allowedCalls = append(allowedCalls, sysGetpeername) - } - - return allowCmpEq(f, "socketcall", 0, allowedCalls...) -} - func torFilterPrctl(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("prctl") if err != nil { @@ -463,19 +401,11 @@ func torFilterSocketpair(f *seccomp.ScmpFilter) error { return nil } -func torFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { - scallMmap, err := seccomp.GetSyscallFromName("mmap") +func torFilterMmap(f *seccomp.ScmpFilter) error { + scall, err := seccomp.GetSyscallFromName("mmap") if err != nil { return err } - scalls := []seccomp.ScmpSyscall{scallMmap} - if is386 { - scallMmap2, err := seccomp.GetSyscallFromName("mmap2") - if err != nil { - return err - } - scalls = append(scalls, scallMmap2) - } // (arg2 == PROT_READ && arg3 == MAP_PRIVATE) isProtRead, err := seccomp.MakeCondition(2, seccomp.CompareEqual, syscall.PROT_READ) @@ -486,10 +416,8 @@ func torFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { if err != nil { return err } - for _, scall := range scalls { - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtRead, isPrivate}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtRead, isPrivate}); err != nil { + return err } // (arg2 == PROT_NONE && arg3 == MAP_PRIVATE | MAP_ANONYMOUS | MAP_NORESERVE) @@ -501,10 +429,8 @@ func torFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { if err != nil { return err } - for _, scall := range scalls { - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtNone, isProtNoneFlags}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtNone, isProtNoneFlags}); err != nil { + return err } isProtReadWrite, err := seccomp.MakeCondition(2, seccomp.CompareEqual, syscall.PROT_READ|syscall.PROT_WRITE) @@ -523,10 +449,8 @@ func torFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { if err != nil { return err } - for _, scall := range scalls { - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtReadWrite, isFlag}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtReadWrite, isFlag}); err != nil { + return err } } @@ -540,28 +464,18 @@ func torFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { if err != nil { return err } - for _, scall := range scalls { - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtReadExec, isProtReadExecFlags}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtReadExec, isProtReadExecFlags}); err != nil { + return err } return nil } -func torFilterFcntl(f *seccomp.ScmpFilter, is386 bool) error { - scallFcntl, err := seccomp.GetSyscallFromName("fcntl") +func torFilterFcntl(f *seccomp.ScmpFilter) error { + scall, err := seccomp.GetSyscallFromName("fcntl") if err != nil { return err } - scalls := []seccomp.ScmpSyscall{scallFcntl} - if is386 { - scallFcntl64, err := seccomp.GetSyscallFromName("fcntl64") - if err != nil { - return err - } - scalls = append(scalls, scallFcntl64) - } isFGetfl, err := seccomp.MakeCondition(1, seccomp.CompareEqual, syscall.F_GETFL) if err != nil { @@ -590,21 +504,19 @@ func torFilterFcntl(f *seccomp.ScmpFilter, is386 bool) error { return err } - for _, scall := range scalls { - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFGetfl}); err != nil { - return err - } - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFGetfd}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFGetfl}); err != nil { + return err + } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFGetfd}); err != nil { + return err + } - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFSetfl, isFSetflFlags}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFSetfl, isFSetflFlags}); err != nil { + return err + } - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFSetfd, isFdCloexec}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isFSetfd, isFdCloexec}); err != nil { + return err } return nil @@ -656,19 +568,11 @@ func obfsFilterSetsockopt(f *seccomp.ScmpFilter) error { } // `mmap` -> `arg2 == PROT_NONE && (arg3 == MAP_PRIVATE|MAP_ANONYMOUS || arg3 == MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS)` -func obfsFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { - scallMmap, err := seccomp.GetSyscallFromName("mmap") +func obfsFilterMmap(f *seccomp.ScmpFilter) error { + scall, err := seccomp.GetSyscallFromName("mmap") if err != nil { return err } - scalls := []seccomp.ScmpSyscall{scallMmap} - if is386 { - scallMmap2, err := seccomp.GetSyscallFromName("mmap2") - if err != nil { - return err - } - scalls = append(scalls, scallMmap2) - } isProtNone, err := seccomp.MakeCondition(2, seccomp.CompareEqual, syscall.PROT_NONE) if err != nil { @@ -683,10 +587,8 @@ func obfsFilterMmap(f *seccomp.ScmpFilter, is386 bool) error { if err != nil { return err } - for _, scall := range scalls { - if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtNone, isFlag}); err != nil { - return err - } + if err = f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isProtNone, isFlag}); err != nil { + return err } } return nil diff --git a/src/cmd/sandboxed-tor-browser/internal/dynlib/cache.go b/src/cmd/sandboxed-tor-browser/internal/dynlib/cache.go index ecac7b8..24dcf47 100644 --- a/src/cmd/sandboxed-tor-browser/internal/dynlib/cache.go +++ b/src/cmd/sandboxed-tor-browser/internal/dynlib/cache.go @@ -262,9 +262,6 @@ func LoadCache() (*Cache, error) { return nil, errUnsupported } - auxvHwcap := getHwcap() - Debugf("dynlib: ELF AUXV AT_HWCAP: %016x", auxvHwcap) - ourOsVersion := getOsVersion() Debugf("dynlib: osVersion: %08x", ourOsVersion) @@ -321,41 +318,13 @@ func LoadCache() (*Cache, error) { // libs[] var flagCheckFn func(uint32) bool - var capCheckFn func(uint64) bool switch runtime.GOARCH { case "amd64": flagCheckFn = func(flags uint32) bool { const wantFlags = flagX8664Lib64 | flagElfLibc6 return flags&wantFlags == wantFlags } - capCheckFn = func(hwcap uint64) bool { - // Not used on this arch AFAIK. - return true - } - case "386": - flagCheckFn = func(flags uint32) bool { - // Reject 64 bit libraries. - if flags&flagX8664Lib64 == flagX8664Lib64 { - return false - } - return flags&flagElfLibc6 == flags - } - capCheckFn = func(hwcap uint64) bool { - // Filter out libraries we have no hope of using. - ourHwcap := auxvHwcap & hwcapMask - libHwcap := hwcap & hwcapMask - if libHwcap&ourHwcap != libHwcap { - return false - } - - ourPlatform := auxvHwcap >> x86HwcapFirstPlatform - libPlatform := hwcap >> x86HwcapFirstPlatform - if ourPlatform < libPlatform { - return false - } - - return true - } + // HWCAP is unused on amd64. default: panic(errUnsupported) } @@ -385,7 +354,7 @@ func LoadCache() (*Cache, error) { Debugf("dynlib: ignoring library: %v (osVersion: %x)", e.key, e.osVersion) } else if err = ValidateLibraryClass(e.value); err != nil { Debugf("dynlib: ignoring library %v (%v)", e.key, err) - } else if flagCheckFn(e.flags) && capCheckFn(e.hwcap) { + } else if flagCheckFn(e.flags) { vec := c.store[e.key] vec = append(vec, e) c.store[e.key] = vec diff --git a/src/cmd/sandboxed-tor-browser/internal/dynlib/hwcap.go b/src/cmd/sandboxed-tor-browser/internal/dynlib/hwcap.go index 8474b0c..7c2998c 100644 --- a/src/cmd/sandboxed-tor-browser/internal/dynlib/hwcap.go +++ b/src/cmd/sandboxed-tor-browser/internal/dynlib/hwcap.go @@ -26,40 +26,9 @@ import "C" import ( "bytes" - "runtime" "syscall" ) -const ( - x86HwcapFirstPlatform = 48 - hwcapMask = 0xffffffff -) - -func getHwcap() uint64 { - if runtime.GOARCH != "386" { - return 0 - } - - // HWCAP_I386_XMM2 = 1 << 26 - // HWCAP_I386_CMOV = 1 << 15 (Debian-ism) - important := uint32((1 << 26) | (1 << 15)) - hwcap := uint64(uint32(C.getauxval(C.AT_HWCAP)) & important) - - // On x86, glibc stores the x86 architecture family in hwcap as well. - x86Platforms := []string{"i386", "i486", "i586", "i686"} - - platform := C.GoString(C.getPlatform()) - for i, v := range x86Platforms { - if v == platform { - i += x86HwcapFirstPlatform - hwcap = hwcap | (uint64(i) << x86HwcapFirstPlatform) - break - } - } - - return hwcap -} - func getOsVersion() uint32 { var buf syscall.Utsname err := syscall.Uname(&buf) diff --git a/src/cmd/sandboxed-tor-browser/internal/dynlib/ldso.go b/src/cmd/sandboxed-tor-browser/internal/dynlib/ldso.go index 438fb3a..874f693 100644 --- a/src/cmd/sandboxed-tor-browser/internal/dynlib/ldso.go +++ b/src/cmd/sandboxed-tor-browser/internal/dynlib/ldso.go @@ -50,8 +50,6 @@ func ValidateLibraryClass(fn string) error { switch runtime.GOARCH { case "amd64": expectedClass = elf.ELFCLASS64 - case "386": - expectedClass = elf.ELFCLASS32 default: return errUnsupported } @@ -75,9 +73,6 @@ func FindLdSo(cache *Cache) (string, string, error) { case "amd64": searchPaths = append(searchPaths, "/lib64") name = "ld-linux-x86-64.so.2" - case "386": - searchPaths = append(searchPaths, "/lib32") - name = "ld-linux.so.2" default: panic("dynlib: unsupported architecture: " + runtime.GOARCH) } @@ -105,5 +100,5 @@ func FindLdSo(cache *Cache) (string, string, error) { // IsSupported returns true if the architecture/os combination has dynlib // sypport. func IsSupported() bool { - return runtime.GOOS == "linux" && (runtime.GOARCH == "amd64" || runtime.GOARCH == "386") + return runtime.GOOS == "linux" && runtime.GOARCH == "amd64" } diff --git a/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go b/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go index 2d016bb..29fea85 100644 --- a/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go +++ b/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go @@ -819,9 +819,8 @@ func (h *hugbox) appendLibraries(cache *dynlib.Cache, binaries []string, extraLi case "amd64": h.symlink("/lib", "/lib64") h.symlink(restrictedLibDir, "/usr/lib64") - case "386": - h.symlink("/lib", "/lib32") - h.symlink(restrictedLibDir, "/usr/lib32") + default: + panic("sandbox: unsupported architecture: " + runtime.GOARCH) } h.standardLibs = false @@ -839,11 +838,8 @@ func init() { "/usr/lib64", // Fedora 25 "/usr/lib/x86_64-linux-gnu", // Debian }, searchPaths...) - case "386": - searchPaths = append([]string{ - "/usr/lib32", - "/usr/lib/i386-linux-gnu", // Debian - }, searchPaths...) + default: + panic("sandbox: unsupported architecture: " + runtime.GOARCH) } distributionDependentLibSearchPath = searchPaths diff --git a/src/cmd/sandboxed-tor-browser/internal/ui/config/config.go b/src/cmd/sandboxed-tor-browser/internal/ui/config/config.go index bddc073..44b6633 100644 --- a/src/cmd/sandboxed-tor-browser/internal/ui/config/config.go +++ b/src/cmd/sandboxed-tor-browser/internal/ui/config/config.go @@ -462,8 +462,6 @@ func New(version string) (*Config, error) { return nil, fmt.Errorf("unsupported OS: %v", runtime.GOOS) } switch runtime.GOARCH { - case "386": - cfg.Architecture = archLinux32 case "amd64": cfg.Architecture = archLinux64 default: [View Less]

1 0

[depictor/master] Add a microdesc consensus link and close 20917
by tom＠torproject.org 29 Dec '16

29 Dec '16

commit cce0a4f1da0abbe0919734b69900a95837e04e6a Author: Tom Ritter <tom(a)ritter.vg> Date: Wed Dec 28 18:35:11 2016 -0600 Add a microdesc consensus link and close 20917 Also fix a tab/space thing and add a line to gitignore --- .gitignore | 1 + website.py | 9 +++++---- write_website.py | 2 +- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index 037b253..043a907 100644 --- a/.gitignore +++ b/.gitignore @@ -2,6 +2,7 @@ … [View More]

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 28 Dec '16

28 Dec '16

commit fc5f11ba84f6f7515f2700447e3fe3e2a6e92466 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Dec 28 23:18:20 2016 +0000 Update translations for tor-browser-manual --- ca/ca.po | 40 +++++++++++++++++++++++++++++----------- 1 file changed, 29 insertions(+), 11 deletions(-) diff --git a/ca/ca.po b/ca/ca.po index ff078c0..e9cf128 100644 --- a/ca/ca.po +++ b/ca/ca.po @@ -1228,7 +1228,7 @@ msgstr "" #: security-slider.page:32 msgid "Security Levels" -… [View More]msgstr "" +msgstr "Nivells de seguretat" #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -1289,17 +1289,19 @@ msgstr "" #: security-slider.page:73 msgid "Low" -msgstr "" +msgstr "Baix" #: security-slider.page:74 msgid "" "At this level, all browser features are enabled. This is the most usable " "option." msgstr "" +"En aquest nivell, tots els navegadors i les seves característiques són " +"activades. Aquesta és la opció més utilitzada." #: transports.page:6 transports.page:20 msgid "Types of pluggable transport" -msgstr "" +msgstr "Tipus de connectors de transport" #: transports.page:10 msgid "Pluggable Transports" @@ -1312,26 +1314,35 @@ msgid "" "Provider or other authority is actively blocking connections to the Tor " "network." msgstr "" +"Els connectors de transport són eines que Tor utilitza per disfressar el " +"tràfic que envia al exterior. Això pot ser d'utilitat en situacions com quan" +" els proveïdors d'Internet o altres autoritat bloquegen les connexions a la " +"xarxa Tor. " #: transports.page:21 msgid "" "Currently there are six pluggable transports available, but more are being " "developed." msgstr "" +"Actualment hi han sis connectors de transports per utilitzar, però n'hi ha " +"més en desenvolupament." #: transports.page:28 msgid "obfs3" -msgstr "" +msgstr "obfs3" #: transports.page:33 msgid "" "obfs3 makes Tor traffic look random, so that it does not look like Tor or " "any other protocol. obfs3 bridges will work in most places." msgstr "" +"obfs3 fa que el tràfic de Tor sembli aleatori, però això no comporta que Tor" +" utilitzi altres protocols. El pont obfs3 pot funcionar en la majoria de " +"llocs." #: transports.page:42 msgid "obfs4" -msgstr "" +msgstr "obfs4" #: transports.page:47 msgid "" @@ -1339,28 +1350,33 @@ msgid "" "from finding bridges by Internet scanning. obfs4 bridges are less likely to " "be blocked than obfs3 bridges." msgstr "" +"obfs4 fa que el tràfic Tor sigui aleatori com obfs3, però també pot prevenir" +" la censura del escaneig de Internet. El pont obfs4 permet menys bloquejos " +"que el obfs3." #: transports.page:56 msgid "Scramblesuit" -msgstr "" +msgstr "Scramblesuit" #: transports.page:61 msgid "ScrambleSuit is similar to obfs4 but has a different set of bridges." -msgstr "" +msgstr "ScrambleSuit és similar a obfs4 però amb ponts diferents." #: transports.page:69 msgid "FTE" -msgstr "" +msgstr "FTE" #: transports.page:74 msgid "" "FTE (format-transforming encryption) disguises Tor traffic as ordinary web " "(HTTP) traffic." msgstr "" +"FTE (format-transforming encryption) emmascara el tràfic Tor com una " +"connexió (HTTP) web." #: transports.page:82 msgid "meek" -msgstr "" +msgstr "meek" #: transports.page:87 msgid "" @@ -1372,7 +1388,7 @@ msgstr "" #: troubleshooting.page:6 msgid "What to do if Tor Browser doesn’t work" -msgstr "" +msgstr "Què fer si el navegador Tor no funciona" #: troubleshooting.page:12 msgid "" @@ -1380,10 +1396,12 @@ msgid "" " running the program, and clicking the “Connect” button if you are using it " "for the first time." msgstr "" +"Hauria de poder navegar pels webs mitjançant el navegador Tor executant el " +"programa i fent clic a \"Connectar\" si l'està utilitzant per primer cop." #: troubleshooting.page:21 msgid "Quick fixes" -msgstr "" +msgstr "Correccions ràpides" #: troubleshooting.page:22 msgid "" [View Less]

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 28 Dec '16

28 Dec '16

commit 7a133308f29783c6dfb920e27bce22685faa3aa8 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Dec 28 22:48:20 2016 +0000 Update translations for tor-browser-manual --- ca/ca.po | 99 +++++++++++++++++++++++++++++++++++++++++++++++++++++++--------- 1 file changed, 86 insertions(+), 13 deletions(-) diff --git a/ca/ca.po b/ca/ca.po index 36946da..ff078c0 100644 --- a/ca/ca.po +++ b/ca/ca.po @@ -777,6 +777,11 @@ msgid "" " Browser includes some additional … [View More]features that help you control what " "information can be tied to your identity." msgstr "" +"Utilitzant la xarxa Tor es pot aturar l'observació de la localització " +"mitjançant la seva direcció IP, però fins i tot sense aquesta informació " +"poden arribar a enllaçar diferents àrees de la seva activitat. Per aquesta " +"raó, el navegador Tor inclou característiques addicionals que permeten " +"ajudar al control de quina informació pot enllaçar-se a la seva identitat." #: managing-identities.page:29 msgid "The URL bar" @@ -790,6 +795,11 @@ msgid "" " be served over two different Tor circuits, so the tracker will not know " "that both connections originate from your browser." msgstr "" +"El navegador Tor centra la experiència web amb la barra d'URL. Fins i tot si" +" es connecta a dos llocs web diferents que utilitzen el mateix sistema de " +"rastrejament de terceres parts, el navegador Tor forçarà que el contingut " +"viatgi per dos circuits independents, per tant el rastrejador no podrà " +"conèixer la relació entre les dues peticions." #: managing-identities.page:38 msgid "" @@ -798,6 +808,9 @@ msgid "" "single website in separate tabs or windows, without any loss of " "functionality." msgstr "" +"Per altra banda, totes les connexions a un lloc web es realitzaran pel " +"mateix circuit virtual, permeten navegar per diferents pàgines web en " +"diferents pestanyes o finestres, sense perdre cap funcionalitat." #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -809,16 +822,20 @@ msgid "" "external ref='media/managing-identities/circuit_full.png' " "md5='bd46d22de952fee42643be46d3f95928'" msgstr "" +"extern ref='media/managing-identities/circuit_full.png' " +"md5='bd46d22de952fee42643be46d3f95928'" #: managing-identities.page:48 msgid "" "You can see a diagram of the circuit that Tor Browser is using for the " "current tab in the onion menu." msgstr "" +"Pot observar el diagrama del circuit que el navegador Tor està utilitzant en" +" la pestanya del menú de la ceba." #: managing-identities.page:55 msgid "Logging in over Tor" -msgstr "" +msgstr "Registre de Tor" #: managing-identities.page:56 msgid "" @@ -1373,18 +1390,24 @@ msgid "" "If Tor Browser doesn’t connect, there may be a simple solution. Try each of " "the following:" msgstr "" +"Si el navegador Tor no es connecta, pot haver una solució fàcil. Provi " +"alguna de les següents opcions:" #: troubleshooting.page:29 msgid "" "Your computer’s system clock must be set correctly, or Tor will not be able " "to connect." msgstr "" +"El rellotge de sistema s'hauria de configurar correctament o Tor no podrà " +"connectar-se." #: troubleshooting.page:35 msgid "" "Make sure another Tor Browser is not already running. If you’re not sure if " "Tor Browser is running, restart your computer." msgstr "" +"Comprovi que el navegador Tor no s'està executant en aquest moment. Si no " +"està segur, reinicii el ordinador." #: troubleshooting.page:41 msgid "" @@ -1392,20 +1415,26 @@ msgid "" "Tor from running. You may need to consult the documentation for your " "antivirus software if you do not know how to do this." msgstr "" +"Comprovi que cap programa d'antivirus instal·lat està intentant evitar que " +"Tor s'executi. Haurà de consultar la documentació del antivirus si no sap " +"com realitzar-ho." #: troubleshooting.page:49 msgid "Temporarily disable your firewall." -msgstr "" +msgstr "Deshabiliti de forma temporal el tallafoc." #: troubleshooting.page:54 msgid "" "Delete Tor Browser and install it again. If updating, do not just overwrite " "your previous Tor Browser files; ensure they are fully deleted beforehand." msgstr "" +"Suprimir el navegador Tor i tornar a instal·lar. Si l'actualització no ha " +"reescrit la versió anterior del navegador Tor, comprovi que s'han eliminat " +"tots els arxius." #: troubleshooting.page:64 msgid "Is your connection censored?" -msgstr "" +msgstr "Està la seva connexió en censura?" #: troubleshooting.page:65 msgid "" @@ -1413,10 +1442,14 @@ msgid "" "censoring connections to the Tor network. Read the <link " "xref=\"circumvention\">Circumvention</link> section for possible solutions." msgstr "" +"Si continua sense poder connectar-se, el seu proveïdor d'Internet " +"probablement està censurant les connexions a la xarxa Tor. Per a més " +"informació <link xref=\"eludir\">Circumvention</link> per trobar possibles " +"solucions." #: troubleshooting.page:74 msgid "Known issues" -msgstr "" +msgstr "Assumptes coneguts" #: troubleshooting.page:75 msgid "" @@ -1425,14 +1458,18 @@ msgid "" "Issues</link> page to see if the problem you are experiencing is already " "listed there." msgstr "" +"El navegador Tor està en constant desenvolupament, i alguns aspectes s'han " +"d'arranjar en el futur. Si us plau comprovi a <link xref=\"més " +"informació\">Known Issues</link> si el problema que experimenta ha estat " +"llistat. " #: uninstalling.page:6 msgid "How to remove Tor Browser from your system" -msgstr "" +msgstr "Com eliminar el navegador Tor del seu sistema" #: uninstalling.page:10 msgid "Uninstalling" -msgstr "" +msgstr "Desinstal·lant" #: uninstalling.page:12 msgid "" @@ -1440,10 +1477,13 @@ msgid "" " computer. Uninstalling Tor Browser will not affect your system’s software " "or settings." msgstr "" +"El navegador no interacciona amb cap altra programari ni configuració del " +"seu ordinador. Desinstal·lar el navegador Tor, tampoc afectarà cap paràmetre" +" del ordinador." #: uninstalling.page:18 msgid "Removing Tor Browser from your system is simple:" -msgstr "" +msgstr "Desinstal·lar el navegador Tor del sistema operatiu és simple:" #: uninstalling.page:24 msgid "" @@ -1452,27 +1492,33 @@ msgid "" "default location, however the folder will be named \"tor-browser_en-US\" if " "you are running the English Tor Browser." msgstr "" +"Ubica la carpeta del navegador Tor. La localització per defecte a Windows és" +" en el escriptori; en OSX és en la carpeta d'aplicacions. A Linux, no hi ha " +"una localització prefixada, de manera que la carpeta serà anomenada \"tor-" +"browser_en-US\" si s'utilitza la versió anglesa." #: uninstalling.page:32 msgid "Delete the Tor Browser folder." -msgstr "" +msgstr "Suprimir la carpeta del navegador Tor." #: uninstalling.page:35 msgid "Empty your Trash" -msgstr "" +msgstr "Buidar la paperera" #: uninstalling.page:39 msgid "" "Note that your operating system’s standard “Uninstall” utility is not used." msgstr "" +"El sistema operatiu de forma estandarditzada la funció de \"Desinstal·lar\" " +"no està usada." #: updating.page:6 msgid "How to update Tor Browser" -msgstr "" +msgstr "Com actualitzar el navegador Tor." #: updating.page:10 msgid "Updating" -msgstr "" +msgstr "Actualitzant" #: updating.page:12 msgid "" @@ -1480,6 +1526,9 @@ msgid "" "outdated version of the software, you may be vulnerable to serious security " "flaws that compromise your privacy and anonymity." msgstr "" +"El navegador Tor ha d'estar actualitzat. Si continua amb l'ús de versions " +"obsoletes, pot ser vulnerable a seriosos problemes de seguretat, " +"comprometent la seva seguretat i anonimat." #: updating.page:18 msgid "" @@ -1488,10 +1537,13 @@ msgid "" "may see a written update indicator when Tor Browser opens. You can update " "either automatically or manually." msgstr "" +"El navegador Tor mostrarà quan es pot actualitzar un cop la última versió " +"sigui alliberada: La icona Tor mostrarà un triangle groc amb un indicador " +"d'actualització. Es pot realitzar de forma manual o automàtica." #: updating.page:26 msgid "Updating Tor Browser automatically" -msgstr "" +msgstr "Actualitzacions automàtiques del navegador Tor" #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -1503,12 +1555,16 @@ msgid "" "external ref='media/updating/update1.png' " "md5='9ff01eb653d92124746fc31efde2bf07'" msgstr "" +"extern ref='media/updating/update1.png' " +"md5='9ff01eb653d92124746fc31efde2bf07'" #: updating.page:32 msgid "" "When you are prompted to update Tor Browser, click on the Torbutton icon, " "then select “Check for Tor Browser Update”." msgstr "" +"Quan sigui requerit a actualitzar el navegador Tor, faci clic en la icona " +"Tor i seleccioni \"comprovar actualitzacions\"." #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -1520,12 +1576,16 @@ msgid "" "external ref='media/updating/update3.png' " "md5='4bd08622b0cacf20b13f75c432176ed3'" msgstr "" +"extern ref='media/updating/update3.png' " +"md5='4bd08622b0cacf20b13f75c432176ed3'" #: updating.page:41 msgid "" "When Tor Browser has finished checking for updates, click on the “Update” " "button." msgstr "" +"Quan el navegador Tor hagi finalitzat la comprovació d'actualitzacions, faci" +" clic en el botó \"Actualitzar\"." #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -1537,22 +1597,28 @@ msgid "" "external ref='media/updating/update4.png' " "md5='1d795e7b695738531db9d4b2b0fb5313'" msgstr "" +"extern ref='media/updating/update4.png' " +"md5='1d795e7b695738531db9d4b2b0fb5313'" #: updating.page:50 msgid "" "Wait for the update to download and install, then restart Tor Browser. You " "will now be running the latest version." msgstr "" +"Esperi a la descarrega de l'actualització i posterior instal·lació, " +"reiniciar el programa. Finalment s'executarà la última versió." #: updating.page:58 msgid "Updating Tor Browser manually" -msgstr "" +msgstr "Actualització manual del navegador Tor" #: updating.page:61 msgid "" "When you are prompted to update Tor Browser, finish the browsing session and" " close the program." msgstr "" +"Quan se li requereixi l'actualització del navegador Tor, acabi la seva " +"navegació i tanqui el programa." #: updating.page:67 msgid "" @@ -1560,6 +1626,9 @@ msgid "" "(see the <link xref=\"uninstalling\">Uninstalling</link> section for more " "information)." msgstr "" +"Suprimir el navegador Tor del sistema amb la supressió de la carpeta que " +"conté (consultar l'enllaç <link xref=\"Desinstal·lar>Uninstalling</link> " +"d'un sistema operatiu)." #: updating.page:74 msgid "" @@ -1567,3 +1636,7 @@ msgid "" " https://www.torproject.org/projects/torbrowser.html.en</link> and download " "a copy of the latest Tor Browser release, then install it as before." msgstr "" +"Visitar <link " +"href=\"https://www.torproject.org/projects/torbrowser.html.en\"> " +"https://www.torproject.org/projects/torbrowser.html.en</link> i descarregar " +"una còpia de l'última versió del navegador Tor, posteriorment instal·lar." [View Less]

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 28 Dec '16

28 Dec '16

commit f3e5bd564d2ec144b384cc19404cb0d647a6fe9c Author: Translation commit bot <translation(a)torproject.org> Date: Wed Dec 28 22:18:18 2016 +0000 Update translations for tor-browser-manual --- ca/ca.po | 57 ++++++++++++++++++++++++++++++++++++++++++++++++++++----- 1 file changed, 52 insertions(+), 5 deletions(-) diff --git a/ca/ca.po b/ca/ca.po index 6b2ce59..36946da 100644 --- a/ca/ca.po +++ b/ca/ca.po @@ -520,6 +520,13 @@ msgid "" "Browser</link>. If they do not match, … [View More]you may need to try downloading again," " or from a different source." msgstr "" +"Seleccioni l'arxiu del navegador Tor. Satori mostrarà la suma de verificació" +" de l'arxiu, que haurà de comprar amb la suma que mostra el programari: " +"accedint fent clic en la paraula \"suma de verificació\" després de començar" +" al descàrrega. Si la suma coincideix, la descàrrega ha estat satisfactòria," +" i es podrà <link xref=\"first-time\">començar a utilitzar el navegador " +"Tor</link>. Si no coincideixen, haurà de fer la descàrrega de nou, o potser " +"des de una font diferent." #: first-time.page:7 msgid "Learn how to use Tor Browser for the first time" @@ -596,6 +603,12 @@ msgid "" "xref=\"circumvention\">Circumvention</link> screen to configure a pluggable " "transport." msgstr "" +"La primera pantalla pregunta si l'accés a la xarxa Tor està bloquejada o " +"censurada. Si creu que no és el cas, seleccioni \"No\". Si creu que la seva " +"connexió està censurada, o ha fet un intent fallit de connexió a la xarxa " +"Tor i cap solució ha funcionat, seleccioni \"Si\". Posteriorment serà " +"derivat a <link xref=\"elusió\">Circumvention</link> a la pantalla de " +"paràmetres dels connectors de transport." #: first-time.page:55 msgid "" @@ -605,6 +618,11 @@ msgid "" "ask your network administrator for guidance. If your connection does not use" " a proxy, click “Continue”." msgstr "" +"La pròxima pantalla pregunta si la seva connexió utilitza un servidor " +"intermedi. En molts casos, no és necessari. En cas afirmatiu cliqui \"Si\", " +"els mateixos paràmetres seran aplicats a tots els navegadors del sistema. Si" +" és possible, pregunti al seu administrador de xarxa. Si la connexió no " +"utilitza un servidor intermedi, cliqui \"Continuar\"." #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -616,6 +634,8 @@ msgid "" "external ref='media/first-time/proxy_question.png' " "md5='30853b3e86cfd386bbc32e5b8b45a378'" msgstr "" +"extern ref='media/first-time/proxy_question.png' " +"md5='30853b3e86cfd386bbc32e5b8b45a378'" #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -627,6 +647,8 @@ msgid "" "external ref='media/first-time/proxy.png' " "md5='13f21a351cd0aa1cf11aada690f3dc90'" msgstr "" +"extern ref='media/first-time/proxy.png' " +"md5='13f21a351cd0aa1cf11aada690f3dc90'" #: index.page:6 msgid "Tor Browser User Manual" @@ -634,26 +656,30 @@ msgstr "Manual d'usuari del navegador Tor" #: known-issues.page:6 msgid "A list of known issues." -msgstr "" +msgstr "Un llistat d'assumptes coneguts" #: known-issues.page:10 msgid "Known Issues" -msgstr "" +msgstr "Assumptes coneguts" #: known-issues.page:14 msgid "" "Tor needs your system clock (and your time zone) set to the correct time." msgstr "" +"Tor necessita el rellotge de sistema (i el fus horari) per configurar el " +"temps correctament." #: known-issues.page:19 msgid "" "The following firewall software have been known to interfere with Tor and " "may need to be temporarily disabled:" msgstr "" +"El següent programari tallafoc ha interferit amb Tor i s'hauria de " +"deshabilitar de forma temporal." #: known-issues.page:23 msgid "Webroot SecureAnywhere" -msgstr "" +msgstr "Webroot SecureAnywhere" #: known-issues.page:26 msgid "Kaspersky Internet Security 2012" @@ -672,16 +698,21 @@ msgid "" "Videos that require Adobe Flash are unavailable. Flash is disabled for " "security reasons." msgstr "" +"Els vídeos que precisen d'Adobe Flash són inaccessibles per motius de " +"seguretat." #: known-issues.page:43 msgid "Tor can not use a bridge if a proxy is set." msgstr "" +"Tor no pot utilitzar un pont si el servidor intermedi està configurat." #: known-issues.page:48 msgid "" "The Tor Browser package is dated January 1, 2000 00:00:00 UTC. This is to " "ensure that each software build is exactly reproducible." msgstr "" +"El paquet d'aplicació del navegador Tor està datat a 1 de gener, 2000 " +"00:00:00 UTC. Això permet assegurar que la versió és reproduïble. " #: known-issues.page:54 msgid "" @@ -690,12 +721,19 @@ msgid "" "executable text files when they are opened\" to \"Ask every time\", then " "click OK." msgstr "" +"Per executar el navegador Tor sobre Ubuntu, s'haurà d'executar mitjançant " +"shell script. Per això accedir a \"Arxius\" (navegador unificat), " +"Paràmetres → Comportament pestanyes → Configurar, executar l'arxiu de text " +"quan s'obri la pantalla emergent a \"Preguntar cada cop\" i fer clic a " +"\"Acceptar\"." #: known-issues.page:62 msgid "" "Tor Browser can also be started from the command line by running the " "following command from inside the Tor Browser directory:" msgstr "" +"El navegador Tor pot ser inicialitzat per línia de comanda mitjançant la " +"següent instrucció en el director del navegador Tor:" #: known-issues.page:66 #, no-wrap @@ -704,14 +742,18 @@ msgid "" " ./start-tor-browser.desktop\n" " " msgstr "" +"\n" +"./start-tor-browser.desktop" #: managing-identities.page:6 msgid "Learn how to control personally-identifying information in Tor Browser" msgstr "" +"Aprengui com controlar la informació d'identificació personal al navegador " +"Tor." #: managing-identities.page:10 msgid "Managing identities" -msgstr "" +msgstr "Administrador d'identitats" #: managing-identities.page:12 msgid "" @@ -721,6 +763,11 @@ msgid "" "trackers, and advertising beacons, all of which can link your activity " "across different sites." msgstr "" +"Quan es connecta a un lloc web, no tan sols els administradors del web poden" +" tenir informació sobre la visita. Molts webs utilitzant programari de " +"tercers, incloent els botons d'agradar de xarxes socials, rastrejadors i " +"publicitat, tots ells poden enllaçar la seva activitat de navegació en " +"diferents webs." #: managing-identities.page:20 msgid "" @@ -733,7 +780,7 @@ msgstr "" #: managing-identities.page:29 msgid "The URL bar" -msgstr "" +msgstr "Barra de URL" #: managing-identities.page:30 msgid "" [View Less]

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits December 2016