August 2018 - tor-commits - lists.torproject.org

[torspec/master] tor-spec: Generalise the first-hop ban to rend points and exit streams
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit 220ea886ec38f7c0ff4b56a1d97421ed182b87a3 Author: teor <teor(a)torproject.org> Date: Thu Jul 26 09:53:39 2018 +1000 tor-spec: Generalise the first-hop ban to rend points and exit streams Part of 26885. --- tor-spec.txt | 27 ++++++++++++++++++++------- 1 file changed, 20 insertions(+), 7 deletions(-) diff --git a/tor-spec.txt b/tor-spec.txt index ef0e12e..441ccee 100644 --- a/tor-spec.txt +++ b/tor-spec.txt @@ -1154,15 +1154,12 @@ see tor-design.pdf. Once both parties have X and Y, they derive their shared circuit keys and 'derivative key data' value via the KDF-TOR function in 5.2.1. - If an OR sees a circuit created with CREATE_FAST, the OR is sure to be the - first hop of a circuit. ORs SHOULD reject attempts to create streams with - RELAY_BEGIN exiting the circuit at the first hop: letting Tor be used as a - single hop proxy makes exit nodes a more attractive target for compromise. - The CREATE_FAST handshake is currently deprecated whenever it is not necessary; the migration is controlled by the "usecreatefast" networkstatus parameter as described in dir-spec.txt. + [Tor 0.3.1.1-alpha and later disable CREATE_FAST by default.] + 5.2. Setting circuit keys 5.2.1. KDF-TOR @@ -1305,8 +1302,24 @@ see tor-design.pdf. Circuits are torn down when an unrecoverable error occurs along the circuit, or when all streams on a circuit are closed and the - circuit's intended lifetime is over. Circuits may be torn down - either completely or hop-by-hop. + circuit's intended lifetime is over. + + ORs SHOULD also tear down circuits which attempt to create: + * streams with RELAY_BEGIN, or + * rendezvous points with ESTABLISH_RENDEZVOUS, + ending at the first hop. Letting Tor be used as a single hop proxy makes + exit and rendezvous nodes a more attractive target for compromise. + + ORs MAY use multiple methods to check if they are the first hop: + * If an OR sees a circuit created with CREATE_FAST, the OR is sure to be + the first hop of a circuit. + * If an OR is the responder, and the initiator: + * did not authenticate the link, or + * authenticated with a key that is not in the consensus, + then the OR is probably the first hop of a circuit (or the second hop of + a circuit via a bridge relay). + + Circuits may be torn down either completely or hop-by-hop. To tear down a circuit completely, an OR or OP sends a DESTROY cell to the adjacent nodes on that circuit, using the appropriate

1 0

[translation/bridgedb_completed] Update translations for bridgedb_completed
by translation＠torproject.org 08 Aug '18

08 Aug '18

commit a39bb38e91a761e473217708d925d6b2ccaf44c7 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Aug 8 16:15:18 2018 +0000 Update translations for bridgedb_completed --- id/LC_MESSAGES/bridgedb.po | 33 +++++++++++++++++---------------- 1 file changed, 17 insertions(+), 16 deletions(-) diff --git a/id/LC_MESSAGES/bridgedb.po b/id/LC_MESSAGES/bridgedb.po index f47b6af1c..d178b3364 100644 --- a/id/LC_MESSAGES/bridgedb.po +++ b/id/LC_MESSAGES/bridgedb.po @@ -9,6 +9,7 @@ # constantius damar wicaksono <constantiusdamar(a)gmail.com>, 2015 # Dwi Cahyono <dwexz_cie(a)yahoo.com>, 2015 # Ferriandy Chianiago <gpl4all(a)gmail.com>, 2015 +# Lucas Susanto <susantolucas(a)yahoo.com>, 2018 # MasIs <is.roadster(a)gmail.com>, 2013 # L1Nus <multazam_ali(a)me.com>, 2014 # Ngalim Siregar <ngalim.siregar(a)gmail.com>, 2015 @@ -20,8 +21,8 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-07-25 03:40+0000\n" -"PO-Revision-Date: 2018-07-31 04:58+0000\n" -"Last-Translator: Fransisca Susanti <susanti(a)jaring.id>\n" +"PO-Revision-Date: 2018-08-08 16:06+0000\n" +"Last-Translator: Lucas Susanto <susantolucas(a)yahoo.com>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -43,19 +44,19 @@ msgstr "" #. "Tor Browser" #: bridgedb/https/server.py:167 msgid "Sorry! Something went wrong with your request." -msgstr "Maaf! Ada yang salah dengan permintaan Anda." +msgstr "Maaf! Telah terjadi kesalahan dengan permintaan Anda." #: bridgedb/https/templates/base.html:79 msgid "Report a Bug" -msgstr "Laporkan Bug" +msgstr "Laporkan bug" #: bridgedb/https/templates/base.html:82 msgid "Source Code" -msgstr "Kode Sumber" +msgstr "Kode" #: bridgedb/https/templates/base.html:85 msgid "Changelog" -msgstr "Catatan Perubahan" +msgstr "Perubahan" #: bridgedb/https/templates/base.html:88 msgid "Contact" @@ -71,7 +72,7 @@ msgstr "Tampilkan QRCode" #: bridgedb/https/templates/bridges.html:52 msgid "QRCode for your bridge lines" -msgstr "QRCode untuk jalur bridge anda" +msgstr "QRCode untuk bridge Anda" #. TRANSLATORS: Please translate this into some silly way to say #. "There was a problem!" in your language. For example, @@ -80,28 +81,28 @@ msgstr "QRCode untuk jalur bridge anda" #: bridgedb/https/templates/bridges.html:67 #: bridgedb/https/templates/bridges.html:125 msgid "Uh oh, spaghettios!" -msgstr "Uh oh, acak-acakan!" +msgstr "Ada masalah!" #: bridgedb/https/templates/bridges.html:68 msgid "It seems there was an error getting your QRCode." -msgstr "Kemungkinan terjadi kesalahan sewaktu mengambil QRCode anda." +msgstr "Ada masalah saat mengambil QRCode Anda." #: bridgedb/https/templates/bridges.html:73 msgid "" "This QRCode contains your bridge lines. Scan it with a QRCode reader to copy" " your bridge lines onto mobile and other devices." -msgstr "QRCode ini berisi jalur bridge anda. Scan dengan QRCode reader untuk menyimpan jalur bridge anda ke perangkat mobile maupun perangkat lainnya." +msgstr "QRCode ini berisi jalur bridge Anda. Scan dengan pembaca QRCode untuk menyimpan jalur bridge Anda ke dalam perangkat mobile ataupun perangkat lainnya." #: bridgedb/https/templates/bridges.html:131 msgid "There currently aren't any bridges available..." -msgstr "Saat ini belum ada bridge yang tersedia..." +msgstr "Belum ada bridge yang tersedia..." #: bridgedb/https/templates/bridges.html:132 #, python-format msgid "" " Perhaps you should try %s going back %s and choosing a different bridge " "type!" -msgstr "Mungkin Anda perlu mencoba %s kembali %s dan memilih tipe bridge yang berbeda!" +msgstr "Mungkin Anda perlu mencoba %s kembali %s dan memilih tipe bridge yang berbeda" #: bridgedb/https/templates/index.html:11 #, python-format @@ -140,11 +141,11 @@ msgstr "Sekarang %s tambahkan bridge ke Browser Tor %s" #: bridgedb/https/templates/options.html:38 #, python-format msgid "%sJ%sust give me bridges!" -msgstr "%sB%serikan saya jembatan!" +msgstr "%sB%serikan saya bridge!" #: bridgedb/https/templates/options.html:51 msgid "Advanced Options" -msgstr "Opsi Lanjutan" +msgstr "Pilihan Lebih Lanjut" #: bridgedb/https/templates/options.html:86 msgid "No" @@ -152,7 +153,7 @@ msgstr "Tidak" #: bridgedb/https/templates/options.html:87 msgid "none" -msgstr "Nihil" +msgstr "Tidak ada" #. TRANSLATORS: Please make sure the '%s' surrounding single letters at the #. beginning of words are present in your final translation. Thanks! @@ -172,7 +173,7 @@ msgstr "%sD%sapatkan Jembatan!" #: bridgedb/strings.py:43 msgid "[This is an automated message; please do not reply.]" -msgstr "[Ini adalah pesan otomatis; tolong jangan dibalas.]" +msgstr "[Ini adalah pesan otomatis; mohon untuk tidak dibalas.]" #: bridgedb/strings.py:45 msgid "Here are your bridges:"

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 08 Aug '18

08 Aug '18

commit 423080f21db0fb3e83d974731779cb476ce7272f Author: Translation commit bot <translation(a)torproject.org> Date: Wed Aug 8 16:15:11 2018 +0000 Update translations for bridgedb --- id/LC_MESSAGES/bridgedb.po | 33 +++++++++++++++++---------------- 1 file changed, 17 insertions(+), 16 deletions(-) diff --git a/id/LC_MESSAGES/bridgedb.po b/id/LC_MESSAGES/bridgedb.po index f47b6af1c..d178b3364 100644 --- a/id/LC_MESSAGES/bridgedb.po +++ b/id/LC_MESSAGES/bridgedb.po @@ -9,6 +9,7 @@ # constantius damar wicaksono <constantiusdamar(a)gmail.com>, 2015 # Dwi Cahyono <dwexz_cie(a)yahoo.com>, 2015 # Ferriandy Chianiago <gpl4all(a)gmail.com>, 2015 +# Lucas Susanto <susantolucas(a)yahoo.com>, 2018 # MasIs <is.roadster(a)gmail.com>, 2013 # L1Nus <multazam_ali(a)me.com>, 2014 # Ngalim Siregar <ngalim.siregar(a)gmail.com>, 2015 @@ -20,8 +21,8 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-07-25 03:40+0000\n" -"PO-Revision-Date: 2018-07-31 04:58+0000\n" -"Last-Translator: Fransisca Susanti <susanti(a)jaring.id>\n" +"PO-Revision-Date: 2018-08-08 16:06+0000\n" +"Last-Translator: Lucas Susanto <susantolucas(a)yahoo.com>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -43,19 +44,19 @@ msgstr "" #. "Tor Browser" #: bridgedb/https/server.py:167 msgid "Sorry! Something went wrong with your request." -msgstr "Maaf! Ada yang salah dengan permintaan Anda." +msgstr "Maaf! Telah terjadi kesalahan dengan permintaan Anda." #: bridgedb/https/templates/base.html:79 msgid "Report a Bug" -msgstr "Laporkan Bug" +msgstr "Laporkan bug" #: bridgedb/https/templates/base.html:82 msgid "Source Code" -msgstr "Kode Sumber" +msgstr "Kode" #: bridgedb/https/templates/base.html:85 msgid "Changelog" -msgstr "Catatan Perubahan" +msgstr "Perubahan" #: bridgedb/https/templates/base.html:88 msgid "Contact" @@ -71,7 +72,7 @@ msgstr "Tampilkan QRCode" #: bridgedb/https/templates/bridges.html:52 msgid "QRCode for your bridge lines" -msgstr "QRCode untuk jalur bridge anda" +msgstr "QRCode untuk bridge Anda" #. TRANSLATORS: Please translate this into some silly way to say #. "There was a problem!" in your language. For example, @@ -80,28 +81,28 @@ msgstr "QRCode untuk jalur bridge anda" #: bridgedb/https/templates/bridges.html:67 #: bridgedb/https/templates/bridges.html:125 msgid "Uh oh, spaghettios!" -msgstr "Uh oh, acak-acakan!" +msgstr "Ada masalah!" #: bridgedb/https/templates/bridges.html:68 msgid "It seems there was an error getting your QRCode." -msgstr "Kemungkinan terjadi kesalahan sewaktu mengambil QRCode anda." +msgstr "Ada masalah saat mengambil QRCode Anda." #: bridgedb/https/templates/bridges.html:73 msgid "" "This QRCode contains your bridge lines. Scan it with a QRCode reader to copy" " your bridge lines onto mobile and other devices." -msgstr "QRCode ini berisi jalur bridge anda. Scan dengan QRCode reader untuk menyimpan jalur bridge anda ke perangkat mobile maupun perangkat lainnya." +msgstr "QRCode ini berisi jalur bridge Anda. Scan dengan pembaca QRCode untuk menyimpan jalur bridge Anda ke dalam perangkat mobile ataupun perangkat lainnya." #: bridgedb/https/templates/bridges.html:131 msgid "There currently aren't any bridges available..." -msgstr "Saat ini belum ada bridge yang tersedia..." +msgstr "Belum ada bridge yang tersedia..." #: bridgedb/https/templates/bridges.html:132 #, python-format msgid "" " Perhaps you should try %s going back %s and choosing a different bridge " "type!" -msgstr "Mungkin Anda perlu mencoba %s kembali %s dan memilih tipe bridge yang berbeda!" +msgstr "Mungkin Anda perlu mencoba %s kembali %s dan memilih tipe bridge yang berbeda" #: bridgedb/https/templates/index.html:11 #, python-format @@ -140,11 +141,11 @@ msgstr "Sekarang %s tambahkan bridge ke Browser Tor %s" #: bridgedb/https/templates/options.html:38 #, python-format msgid "%sJ%sust give me bridges!" -msgstr "%sB%serikan saya jembatan!" +msgstr "%sB%serikan saya bridge!" #: bridgedb/https/templates/options.html:51 msgid "Advanced Options" -msgstr "Opsi Lanjutan" +msgstr "Pilihan Lebih Lanjut" #: bridgedb/https/templates/options.html:86 msgid "No" @@ -152,7 +153,7 @@ msgstr "Tidak" #: bridgedb/https/templates/options.html:87 msgid "none" -msgstr "Nihil" +msgstr "Tidak ada" #. TRANSLATORS: Please make sure the '%s' surrounding single letters at the #. beginning of words are present in your final translation. Thanks! @@ -172,7 +173,7 @@ msgstr "%sD%sapatkan Jembatan!" #: bridgedb/strings.py:43 msgid "[This is an automated message; please do not reply.]" -msgstr "[Ini adalah pesan otomatis; tolong jangan dibalas.]" +msgstr "[Ini adalah pesan otomatis; mohon untuk tidak dibalas.]" #: bridgedb/strings.py:45 msgid "Here are your bridges:"

1 0

[tor/release-0.3.3] Merge branch 'maint-0.3.2' into maint-0.3.3
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit 00536254b765900127af04f278ed591d562434d9 Merge: 2a6c1585b 8e68fe7e1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 8 09:26:23 2018 -0400 Merge branch 'maint-0.3.2' into maint-0.3.3 changes/bug25440 | 5 +++++ src/common/sandbox.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[tor/release-0.3.3] Changes file for 25440
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit 27a2a6cb9b8a590a88c479539efae7bd31a4102f Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 8 09:26:21 2018 -0400 Changes file for 25440 --- changes/bug25440 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/changes/bug25440 b/changes/bug25440 new file mode 100644 index 000000000..f8d9dd4fa --- /dev/null +++ b/changes/bug25440 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Fix a bug in out sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto.

1 0

[tor/release-0.3.3] Merge branch 'maint-0.2.9' into maint-0.3.2
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit 8e68fe7e1c84e4ad513cd6b0af686a51c49e55cb Merge: 4856a6e6c 27a2a6cb9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 8 09:26:22 2018 -0400 Merge branch 'maint-0.2.9' into maint-0.3.2 changes/bug25440 | 5 +++++ src/common/sandbox.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[tor/release-0.3.3] Merge branch 'maint-0.3.3' into release-0.3.3
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit 4012daacd12f8c3ab29250d6a004ede6b360faec Merge: 401052548 00536254b Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 8 09:26:23 2018 -0400 Merge branch 'maint-0.3.3' into release-0.3.3 changes/bug25440 | 5 +++++ src/common/sandbox.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[tor/release-0.3.4] Fix crash when calling openat with sandbox enabled #25440
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit a350f216b30c5841b8eb0303c9c3fd32a2b2245b Author: Daniel Pinto <danielpinto52(a)gmail.com> Date: Tue Apr 17 01:31:49 2018 +0100 Fix crash when calling openat with sandbox enabled #25440 The seccomp rule for the openat syscall checks for the AT_FDCWD constant. Because this constant is usually a negative value, a cast to unsigned int is necessary to make sure it does not get converted to uint64_t used by seccomp. More info on: https://github.com/seccomp/libseccomp/issues/69#issuecomment-273805980 --- src/common/sandbox.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 3d27ea66b..0a972d496 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -469,7 +469,7 @@ allow_file_open(scmp_filter_ctx ctx, int use_openat, const char *file) { if (use_openat) { return seccomp_rule_add_2(ctx, SCMP_ACT_ALLOW, SCMP_SYS(openat), - SCMP_CMP_STR(0, SCMP_CMP_EQ, AT_FDCWD), + SCMP_CMP(0, SCMP_CMP_EQ, (unsigned int)AT_FDCWD), SCMP_CMP_STR(1, SCMP_CMP_EQ, file)); } else { return seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(open),

1 0

[tor/release-0.3.3] Fix crash when calling openat with sandbox enabled #25440
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit a350f216b30c5841b8eb0303c9c3fd32a2b2245b Author: Daniel Pinto <danielpinto52(a)gmail.com> Date: Tue Apr 17 01:31:49 2018 +0100 Fix crash when calling openat with sandbox enabled #25440 The seccomp rule for the openat syscall checks for the AT_FDCWD constant. Because this constant is usually a negative value, a cast to unsigned int is necessary to make sure it does not get converted to uint64_t used by seccomp. More info on: https://github.com/seccomp/libseccomp/issues/69#issuecomment-273805980 --- src/common/sandbox.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 3d27ea66b..0a972d496 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -469,7 +469,7 @@ allow_file_open(scmp_filter_ctx ctx, int use_openat, const char *file) { if (use_openat) { return seccomp_rule_add_2(ctx, SCMP_ACT_ALLOW, SCMP_SYS(openat), - SCMP_CMP_STR(0, SCMP_CMP_EQ, AT_FDCWD), + SCMP_CMP(0, SCMP_CMP_EQ, (unsigned int)AT_FDCWD), SCMP_CMP_STR(1, SCMP_CMP_EQ, file)); } else { return seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(open),

1 0

[tor/release-0.3.4] Merge branch 'maint-0.2.9' into maint-0.3.2
by nickm＠torproject.org 08 Aug '18

08 Aug '18

commit 8e68fe7e1c84e4ad513cd6b0af686a51c49e55cb Merge: 4856a6e6c 27a2a6cb9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 8 09:26:22 2018 -0400 Merge branch 'maint-0.2.9' into maint-0.3.2 changes/bug25440 | 5 +++++ src/common/sandbox.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0