April 2021 - tor-commits - lists.torproject.org

[translation/tails-misc] https://gitweb.torproject.org/translation.git/commit/?h=tails-misc
by translation＠torproject.org 19 Apr '21

19 Apr '21

commit 6995ea17f74c027e020fc6ddcbb721b32060ed66 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Apr 19 15:45:47 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-misc --- pl.po | 35 ++++++++++++++++++----------------- 1 file changed, 18 insertions(+), 17 deletions(-) diff --git a/pl.po b/pl.po index 01a87311e4..e67eb245c9 100644 --- a/pl.po +++ b/pl.po @@ -19,6 +19,7 @@ # Jarek Kaczynski, 2021 # Konrad W <360kon(a)gmail.com>, 2019 # Marcin S <dzidek1003(a)o2.pl>, 2018,2021 +# No Ne, 2021 # oirpos <kuba2707(a)gmail.com>, 2015 # phla47 <phla47(a)gmail.com>, 2013 # sebx, 2013-2015 @@ -29,8 +30,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2021-04-19 08:20+0200\n" -"PO-Revision-Date: 2021-04-19 09:15+0000\n" -"Last-Translator: Transifex Bot <>\n" +"PO-Revision-Date: 2021-04-19 15:42+0000\n" +"Last-Translator: No Ne\n" "Language-Team: Polish (http://www.transifex.com/otf/torproject/language/pl/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -119,7 +120,7 @@ msgstr "_Wyjście" #: config/chroot_local-includes/usr/src/iuk/lib/Tails/IUK/DownloadProgress.pm:59 msgid "Unknow time" -msgstr "" +msgstr "Nieznany czas" #. Translators: Don't translate {count}, it's a place holder and #. will be replaced. @@ -226,7 +227,7 @@ msgstr "Wystąpił błąd podczas aktualizacji klucza podpisu.\\n\\nTo #: config/chroot_local-includes/usr/src/iuk/lib/Tails/IUK/Frontend.pm:304 msgid "Error while downloading the signing key" -msgstr "" +msgstr "Błąd podczas pobierania klucza podpisu" #: config/chroot_local-includes/usr/src/iuk/lib/Tails/IUK/Frontend.pm:316 msgid "Error while updating the signing key" @@ -1112,7 +1113,7 @@ msgstr "Wybierz pliki, które będą zapisane na wolumenie przechowywania danych msgid "" "The selected files will be stored in the encrypted partition {partition} " "({size}), on the {vendor} {model} device." -msgstr "" +msgstr "Wybrane pliki zostaną zapisane na zaszyfrowanej partycji {partition} ({size}), na urządzeniu {vendor} {model}." #: config/chroot_local-includes/usr/src/persistence-setup/lib/Tails/Persistence/Step/Configure.pm:98 msgid "Save" @@ -1139,7 +1140,7 @@ msgstr "Twoje zachowane dane zostaną skasowane." msgid "" "The persistent volume {partition} ({size}), on the {vendor} {model} " "device, will be deleted." -msgstr "" +msgstr "Wolumen przechowywania danych {partition} ({size}), na urządzeniu {vendor} {model}, zostanie skasowany." #: config/chroot_local-includes/usr/src/persistence-setup/lib/Tails/Persistence/Step/Delete.pm:64 msgid "Delete" @@ -1203,7 +1204,7 @@ msgstr "Thunderbird" #: config/chroot_local-includes/usr/src/persistence-setup/lib/Tails/Persistence/Configuration/Presets.pm:150 msgid "Thunderbird emails, feeds, and OpenPGP keys" -msgstr "" +msgstr "Wiadomości e-mail, kanały i klucze OpenPGP Thunderbirda" #: config/chroot_local-includes/usr/src/persistence-setup/lib/Tails/Persistence/Configuration/Presets.pm:163 msgid "GnuPG" @@ -1316,7 +1317,7 @@ msgstr "Kreator przechowywania danych - Koniec" #: config/chroot_local-includes/usr/src/persistence-setup/lib/Tails/Persistence/Setup.pm:701 msgid "" "Any changes you have made will only take effect after restarting Tails." -msgstr "" +msgstr "Wszelkie wprowadzone zmiany zaczną obowiązywać dopiero po ponownym uruchomieniu Tails." #: config/chroot_local-includes/usr/src/persistence-setup/lib/Tails/Persistence/Setup.pm:711 msgid "Restart Now" @@ -1366,10 +1367,10 @@ msgstr[3] "Klucze zaimportowane" #, python-brace-format msgid "Imported a key for {uids}" msgid_plural "Imported keys for {uids}" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" -msgstr[3] "" +msgstr[0] "Zaimportowano klucz do {uids}" +msgstr[1] "Zaimportowano klucze do {uids}" +msgstr[2] "Zaimportowano kluczy do {uids}" +msgstr[3] "Zaimportowano kluczy do {uids}" #: config/chroot_local-includes/usr/share/gnome-shell/extensions/status-menu-helper@tails.boum.org/extension.js:75 msgid "Lock screen" @@ -1680,7 +1681,7 @@ msgid "" "\n" "Or do a manual upgrade.\n" "See {manual_upgrade_url}" -msgstr "" +msgstr "Za mało dostępnej pamięci, aby sprawdzić dostępność aktualizacji.\n\nUpewnij się, że ten system spełnia wymagania związane z uruchomieniem Tails.\nZobacz file:///usr/share/doc/tails/website/doc/about/requirements.en.html\n\nSpróbuj zrestartować Tails, aby ponownie sprawdzić dostępność aktualizacji.\n\nLub wykonaj ręczną aktualizację.\nZobacz {manual_upgrade_url}" #: config/chroot_local-includes/usr/local/bin/tails-upgrade-frontend-wrapper:76 #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:27 @@ -1713,22 +1714,22 @@ msgstr "Dowiedz się więcej" #: config/chroot_local-includes/usr/local/bin/thunderbird:40 msgid "You need to migrate your OpenPGP keys" -msgstr "" +msgstr "Musisz zmigrować swoje klucze OpenPGP" #: config/chroot_local-includes/usr/local/bin/thunderbird:42 msgid "" "Thunderbird 78 now replaces the Enigmail extension with built-" "in support for OpenPGP encryption. To continue using your OpenPGP keys in " "Thunderbird, follow our migration instructions." -msgstr "" +msgstr "Thunderbird 78 zastępuje teraz rozszerzenie Enigmail wbudowaną obsługą szyfrowania OpenPGP. Aby nadal używać kluczy OpenPGP w Thunderbirdzie, postępuj zgodnie z naszymi instrukcjami migracji." #: config/chroot_local-includes/usr/local/bin/thunderbird:44 msgid "_Open Migration Instructions" -msgstr "" +msgstr "_Otwórz instrukcje migracji" #: config/chroot_local-includes/usr/local/bin/thunderbird:45 msgid "_Migrate Later" -msgstr "" +msgstr "_Migruj później" #: config/chroot_local-includes/usr/local/bin/tor-browser:46 msgid "Tor is not ready"

1 0

[tor/master] Merge branch 'mr_347_squashed' into maint-0.4.6
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 0ceacb5482848a4029eaf26095619ad09ff22c52 Merge: d162b98548 6281c90885 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Apr 19 11:40:44 2021 -0400 Merge branch 'mr_347_squashed' into maint-0.4.6 changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+)

1 0

[tor/master] relay: Emit log warning if Address is internal and can't be used
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 6281c90885b09d3c5faad51cbb4cee686a4bb8ff Author: David Goulet <dgoulet(a)torproject.org> Date: Thu Mar 25 10:15:50 2021 -0400 relay: Emit log warning if Address is internal and can't be used Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+) diff --git a/changes/ticket40290 b/changes/ticket40290 new file mode 100644 index 0000000000..3d3a64be93 --- /dev/null +++ b/changes/ticket40290 @@ -0,0 +1,3 @@ + o Minor bugfix (logging, relay): + - Emit a warning if an Address is found to be internal and tor can't use it. + Fixes bug 40290; bugfix on 0.4.5.1-alpha. diff --git a/src/app/config/resolve_addr.c b/src/app/config/resolve_addr.c index 43a3eb39de..09d4b800f6 100644 --- a/src/app/config/resolve_addr.c +++ b/src/app/config/resolve_addr.c @@ -343,6 +343,18 @@ get_address_from_config(const or_options_t *options, int warn_severity, * used, custom authorities must be defined else it is a fatal error. * Furthermore, if the Address was resolved to an internal interface, we * stop immediately. */ + if (ret == ERR_ADDRESS_IS_INTERNAL) { + static bool logged_once = false; + if (!logged_once) { + log_warn(LD_CONFIG, "Address set with an internal address. Tor will " + "not work unless custom directory authorities " + "are defined (AlternateDirAuthority). It is also " + "possible to use an internal address if " + "PublishServerDescriptor is set to 0 and " + "AssumeReachable(IPv6) to 1."); + logged_once = true; + } + } tor_free(*hostname_out); return FN_RET_BAIL; }

1 0

[tor/master] Merge branch 'maint-0.4.6'
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit cbf71c4fa7a05033c068844ce9f214eeff5bb939 Merge: 07237b484e 0ceacb5482 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Apr 19 11:43:39 2021 -0400 Merge branch 'maint-0.4.6' changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+)

1 0

[tor/maint-0.4.6] Merge branch 'mr_347_squashed' into maint-0.4.6
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 0ceacb5482848a4029eaf26095619ad09ff22c52 Merge: d162b98548 6281c90885 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Apr 19 11:40:44 2021 -0400 Merge branch 'mr_347_squashed' into maint-0.4.6 changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+)

1 0

[tor/maint-0.4.6] relay: Emit log warning if Address is internal and can't be used
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 6281c90885b09d3c5faad51cbb4cee686a4bb8ff Author: David Goulet <dgoulet(a)torproject.org> Date: Thu Mar 25 10:15:50 2021 -0400 relay: Emit log warning if Address is internal and can't be used Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+) diff --git a/changes/ticket40290 b/changes/ticket40290 new file mode 100644 index 0000000000..3d3a64be93 --- /dev/null +++ b/changes/ticket40290 @@ -0,0 +1,3 @@ + o Minor bugfix (logging, relay): + - Emit a warning if an Address is found to be internal and tor can't use it. + Fixes bug 40290; bugfix on 0.4.5.1-alpha. diff --git a/src/app/config/resolve_addr.c b/src/app/config/resolve_addr.c index 43a3eb39de..09d4b800f6 100644 --- a/src/app/config/resolve_addr.c +++ b/src/app/config/resolve_addr.c @@ -343,6 +343,18 @@ get_address_from_config(const or_options_t *options, int warn_severity, * used, custom authorities must be defined else it is a fatal error. * Furthermore, if the Address was resolved to an internal interface, we * stop immediately. */ + if (ret == ERR_ADDRESS_IS_INTERNAL) { + static bool logged_once = false; + if (!logged_once) { + log_warn(LD_CONFIG, "Address set with an internal address. Tor will " + "not work unless custom directory authorities " + "are defined (AlternateDirAuthority). It is also " + "possible to use an internal address if " + "PublishServerDescriptor is set to 0 and " + "AssumeReachable(IPv6) to 1."); + logged_once = true; + } + } tor_free(*hostname_out); return FN_RET_BAIL; }

1 0

[tor/release-0.4.6] Merge branch 'mr_347_squashed' into maint-0.4.6
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 0ceacb5482848a4029eaf26095619ad09ff22c52 Merge: d162b98548 6281c90885 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Apr 19 11:40:44 2021 -0400 Merge branch 'mr_347_squashed' into maint-0.4.6 changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+)

1 0

[tor/release-0.4.6] relay: Emit log warning if Address is internal and can't be used
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 6281c90885b09d3c5faad51cbb4cee686a4bb8ff Author: David Goulet <dgoulet(a)torproject.org> Date: Thu Mar 25 10:15:50 2021 -0400 relay: Emit log warning if Address is internal and can't be used Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/ticket40290 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++++ 2 files changed, 15 insertions(+) diff --git a/changes/ticket40290 b/changes/ticket40290 new file mode 100644 index 0000000000..3d3a64be93 --- /dev/null +++ b/changes/ticket40290 @@ -0,0 +1,3 @@ + o Minor bugfix (logging, relay): + - Emit a warning if an Address is found to be internal and tor can't use it. + Fixes bug 40290; bugfix on 0.4.5.1-alpha. diff --git a/src/app/config/resolve_addr.c b/src/app/config/resolve_addr.c index 43a3eb39de..09d4b800f6 100644 --- a/src/app/config/resolve_addr.c +++ b/src/app/config/resolve_addr.c @@ -343,6 +343,18 @@ get_address_from_config(const or_options_t *options, int warn_severity, * used, custom authorities must be defined else it is a fatal error. * Furthermore, if the Address was resolved to an internal interface, we * stop immediately. */ + if (ret == ERR_ADDRESS_IS_INTERNAL) { + static bool logged_once = false; + if (!logged_once) { + log_warn(LD_CONFIG, "Address set with an internal address. Tor will " + "not work unless custom directory authorities " + "are defined (AlternateDirAuthority). It is also " + "possible to use an internal address if " + "PublishServerDescriptor is set to 0 and " + "AssumeReachable(IPv6) to 1."); + logged_once = true; + } + } tor_free(*hostname_out); return FN_RET_BAIL; }

1 0

[tor/master] Merge remote-tracking branch 'jigsaw/fix-40317_046-saveconf-sandbox-one-backup'
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit 07237b484e051afe93b8115c673f2ffb4864edf0 Merge: de33be6e32 bbd558a6eb Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Apr 19 11:32:21 2021 -0400 Merge remote-tracking branch 'jigsaw/fix-40317_046-saveconf-sandbox-one-backup' changes/bug40317 | 5 +++++ src/app/config/config.c | 17 +++++++++-------- src/app/config/config.h | 3 +++ src/app/main/main.c | 22 +++++++++++++++++----- 4 files changed, 34 insertions(+), 13 deletions(-)

1 0

[tor/master] Make SAVECONF keep only one backup and add sandbox rules for it. #40317
by nickm＠torproject.org 19 Apr '21

19 Apr '21

commit bbd558a6eb2745a3b42ad8875604c3ecc2de84be Author: Daniel Pinto <danielpinto52(a)gmail.com> Date: Wed Apr 7 23:46:59 2021 +0100 Make SAVECONF keep only one backup and add sandbox rules for it. #40317 When seccomp sandbox is active, SAVECONF failed because it was not able to save the backup files for torrc. This commit simplifies the implementation of SAVECONF and sandbox by making it keep only one backup of the configuration file. --- changes/bug40317 | 5 +++++ src/app/config/config.c | 17 +++++++++-------- src/app/config/config.h | 3 +++ src/app/main/main.c | 22 +++++++++++++++++----- 4 files changed, 34 insertions(+), 13 deletions(-) diff --git a/changes/bug40317 b/changes/bug40317 new file mode 100644 index 0000000000..18ec499a51 --- /dev/null +++ b/changes/bug40317 @@ -0,0 +1,5 @@ + o Minor bugfixes (control, sandbox): + - Allows the control command SAVECONF to succeed when the seccomp + sandbox is enabled. Makes SAVECONF keep only one backup file to + simplify implementation. Fixes bug 40317; bugfix on 0.2.5.4-alpha. + Patch by Daniel Pinto. diff --git a/src/app/config/config.c b/src/app/config/config.c index 5115835a0c..bfa258c904 100644 --- a/src/app/config/config.c +++ b/src/app/config/config.c @@ -6856,7 +6856,7 @@ validate_data_directories(or_options_t *options) /** This string can change; it tries to give the reader an idea * that editing this file by hand is not a good plan. */ #define GENERATED_FILE_COMMENT "# The old torrc file was renamed " \ - "to torrc.orig.1 or similar, and Tor will ignore it" + "to torrc.orig.1, and Tor will ignore it" /** Save a configuration file for the configuration in options * into the file fname. If the file already exists, and @@ -6900,17 +6900,18 @@ write_configuration_file(const char *fname, const or_options_t *options) GENERATED_FILE_PREFIX, GENERATED_FILE_COMMENT, new_conf); if (rename_old) { - int i = 1; char *fn_tmp = NULL; - while (1) { - tor_asprintf(&fn_tmp, "%s.orig.%d", fname, i); - if (file_status(fn_tmp) == FN_NOENT) - break; + tor_asprintf(&fn_tmp, CONFIG_BACKUP_PATTERN, fname); + file_status_t fn_tmp_status = file_status(fn_tmp); + if (fn_tmp_status == FN_DIR || fn_tmp_status == FN_ERROR) { + log_warn(LD_CONFIG, + "Config backup file \"%s\" is not a file? Failing.", fn_tmp); tor_free(fn_tmp); - ++i; + goto err; } + log_notice(LD_CONFIG, "Renaming old configuration file to \"%s\"", fn_tmp); - if (tor_rename(fname, fn_tmp) < 0) {//XXXX sandbox doesn't allow + if (replace_file(fname, fn_tmp) < 0) { log_warn(LD_FS, "Couldn't rename configuration file \"%s\" to \"%s\": %s", fname, fn_tmp, strerror(errno)); diff --git a/src/app/config/config.h b/src/app/config/config.h index e534bcbcbe..de198e203d 100644 --- a/src/app/config/config.h +++ b/src/app/config/config.h @@ -44,6 +44,9 @@ int get_protocol_warning_severity_level(void); #define LOG_PROTOCOL_WARN (get_protocol_warning_severity_level()) +/** Pattern for backing up configuration files */ +#define CONFIG_BACKUP_PATTERN "%s.orig.1" + /** An error from options_trial_assign() or options_init_from_string(). */ typedef enum setopt_err_t { SETOPT_OK = 0, diff --git a/src/app/main/main.c b/src/app/main/main.c index c113e0183d..89564490e6 100644 --- a/src/app/main/main.c +++ b/src/app/main/main.c @@ -852,7 +852,6 @@ sandbox_init_filter(void) { const or_options_t *options = get_options(); sandbox_cfg_t *cfg = sandbox_cfg_new(); - int i; sandbox_cfg_allow_openat_filename(&cfg, get_cachedir_fname("cached-status")); @@ -938,10 +937,23 @@ sandbox_init_filter(void) else sandbox_cfg_allow_open_filename(&cfg, tor_strdup("/etc/resolv.conf")); - for (i = 0; i < 2; ++i) { - if (get_torrc_fname(i)) { - sandbox_cfg_allow_open_filename(&cfg, tor_strdup(get_torrc_fname(i))); - } + const char *torrc_defaults_fname = get_torrc_fname(1); + if (torrc_defaults_fname) { + sandbox_cfg_allow_open_filename(&cfg, tor_strdup(torrc_defaults_fname)); + } + const char *torrc_fname = get_torrc_fname(0); + if (torrc_fname) { + sandbox_cfg_allow_open_filename(&cfg, tor_strdup(torrc_fname)); + // allow torrc backup and torrc.tmp to make SAVECONF work + char *torrc_bck = NULL; + tor_asprintf(&torrc_bck, CONFIG_BACKUP_PATTERN, torrc_fname); + sandbox_cfg_allow_rename(&cfg, tor_strdup(torrc_fname), torrc_bck); + char *torrc_tmp = NULL; + tor_asprintf(&torrc_tmp, "%s.tmp", torrc_fname); + sandbox_cfg_allow_rename(&cfg, torrc_tmp, tor_strdup(torrc_fname)); + sandbox_cfg_allow_open_filename(&cfg, tor_strdup(torrc_tmp)); + // we need to stat the existing backup file + sandbox_cfg_allow_stat_filename(&cfg, tor_strdup(torrc_bck)); } SMARTLIST_FOREACH(options->FilesOpenedByIncludes, char *, f, {

1 0