September 2021 - tor-commits - lists.torproject.org

[translation/torbutton-browseronboardingproperties] https://gitweb.torproject.org/translation.git/commit/?h=torbutton-browseronboardingproperties
by translation＠torproject.org 14 Sep '21

14 Sep '21

commit f24ac967765692ffd02edcaf178f533ad5ee510b Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 14 11:48:10 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=torbutton-browseron… --- bg/browserOnboarding.properties | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/bg/browserOnboarding.properties b/bg/browserOnboarding.properties index a73de5f7ec..b907e94d1e 100644 --- a/bg/browserOnboarding.properties +++ b/bg/browserOnboarding.properties @@ -9,7 +9,7 @@ onboarding.tour-tor-welcome.next-button=Поверителност onboarding.tour-tor-privacy=Поверителност onboarding.tour-tor-privacy.title=Snub trackers and snoopers. -onboarding.tour-tor-privacy.description=Tor Browser isolates cookies and deletes your browser history after your session. These modifications ensure your privacy and security are protected in the browser. Click ‘Tor Network’ to learn how we protect you on the network level. +onboarding.tour-tor-privacy.description=Тор браузърът изолира бисквитките и изтрива Вашата история в браузъра след Вашата сесия. Тези модификации осигуряват защитата на Вашата поверителност и сигурност в браузъра. Кликнете \\'Тор Мрежа\\' за да научите, как Ви защитаваме на мрежово ниво. onboarding.tour-tor-privacy.button=Мрежа на Tor onboarding.tour-tor-network=Мрежа на Tor @@ -26,7 +26,7 @@ onboarding.tour-tor-circuit-display.button=See My Path onboarding.tour-tor-circuit-display.next-button=Сигурност onboarding.tour-tor-security=Сигурност -onboarding.tour-tor-security.title=Choose your experience. +onboarding.tour-tor-security.title=Изберете Вашия опит. onboarding.tour-tor-security.description=We also provide you with additional settings for bumping up your browser security. Our Security Settings allow you to block elements that could be used to attack your computer. Click below to see what the different options do. onboarding.tour-tor-security.description-suffix=Note: By default, NoScript and HTTPS Everywhere are not included on the toolbar, but you can customize your toolbar to add them. onboarding.tour-tor-security-level.button=See Your Security Level @@ -38,7 +38,7 @@ onboarding.tour-tor-expect-differences.description=With all the security and pri onboarding.tour-tor-expect-differences.button=See FAQs onboarding.tour-tor-expect-differences.next-button=Go to Onion Services -onboarding.tour-tor-onion-services=Onion Services +onboarding.tour-tor-onion-services=Onion услуги onboarding.tour-tor-onion-services.title=Be extra protected. onboarding.tour-tor-onion-services.description=Onion services are sites that end with a .onion that provide extra protections to publishers and visitors, including added safeguards against censorship. Onion services allow anyone to provide content and services anonymously. Click below to visit the DuckDuckGo onion site. onboarding.tour-tor-onion-services.button=Visit an Onion

1 0

[translation/gettor-website-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-contentspot
by translation＠torproject.org 13 Sep '21

13 Sep '21

commit e112b27b4db2d9a998722afd9d3e0a5f243c2be6 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Sep 13 21:45:28 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-cont… --- contents+tk.po | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/contents+tk.po b/contents+tk.po index 895298ca38..9f39d9014f 100644 --- a/contents+tk.po +++ b/contents+tk.po @@ -1,6 +1,7 @@ # # Translators: # erinm, 2021 +# Jahan Taganova <jahan.b.taganova(a)gmail.com>, 2021 # msgid "" msgstr "" @@ -8,7 +9,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2021-04-17 07:56+CET\n" "PO-Revision-Date: 2021-03-24 14:33+0000\n" -"Last-Translator: erinm, 2021\n" +"Last-Translator: Jahan Taganova <jahan.b.taganova(a)gmail.com>, 2021\n" "Language-Team: Turkmen (https://www.transifex.com/otf/teams/1519/tk/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -96,7 +97,7 @@ msgstr "" #: (dynamic) msgid "Sign up" -msgstr "" +msgstr "Ýazyl" #: (dynamic) msgid ""

1 0

[translation/gettor-website-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-contentspot
by translation＠torproject.org 13 Sep '21

13 Sep '21

commit be5ebd4a51e9f49e400e01bc6c5af72aa1ae6186 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Sep 13 21:15:23 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-cont… --- contents+ky.po | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/contents+ky.po b/contents+ky.po index 7155650f36..832768ba6f 100644 --- a/contents+ky.po +++ b/contents+ky.po @@ -1,6 +1,7 @@ # # Translators: # erinm, 2021 +# Chyngyz Monokbaev <monokbaev(a)gmail.com>, 2021 # msgid "" msgstr "" @@ -8,7 +9,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2021-04-17 07:56+CET\n" "PO-Revision-Date: 2021-03-24 14:33+0000\n" -"Last-Translator: erinm, 2021\n" +"Last-Translator: Chyngyz Monokbaev <monokbaev(a)gmail.com>, 2021\n" "Language-Team: Kyrgyz (https://www.transifex.com/otf/teams/1519/ky/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -96,7 +97,7 @@ msgstr "" #: (dynamic) msgid "Sign up" -msgstr "" +msgstr "Катталуу" #: (dynamic) msgid ""

1 0

[tor/main] Use Debian bullseye for our hardened build.
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit 12b64845aebf08e45db94e5610d0ced95b5c1667 Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Aug 16 13:52:58 2021 +0000 Use Debian bullseye for our hardened build. --- .gitlab-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 915f242f26..b83079aa4a 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -117,7 +117,7 @@ debian-minimal: # # TODO: This will be faster once we merge #40098 and #40099. debian-hardened: - image: debian:testing + image: debian:bullseye <<: *debian-template variables: ALL_BUGS_ARE_FATAL: "yes"

1 0

[tor/main] Only check for bindable ports if we are unsure if it will fail.
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit fcef8e3f75cf39ae7eb6195713d4855b4fc4d08c Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Feb 4 23:11:11 2021 +0000 Only check for bindable ports if we are unsure if it will fail. We currently assume that the only way for Tor to listen on ports in the privileged port range (1 to 1023), on Linux, is if we are granted the NET_BIND_SERVICE capability. Today on Linux, it's possible to specify the beginning of the unprivileged port range using a sysctl configuration option. Docker (and thus the CI service Tor uses) recently changed this sysctl value to 0, which causes our tests to fail as they assume that we should NOT be able to bind to a privileged port *without* the NET_BIND_SERVICE capability. In this patch, we read the value of the sysctl value via the /proc/sys/ filesystem iff it's present, otherwise we assume the default unprivileged port range begins at port 1024. See: tor#40275 --- src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-) diff --git a/src/test/test_switch_id.c b/src/test/test_switch_id.c index baddf8d66e..91277e374f 100644 --- a/src/test/test_switch_id.c +++ b/src/test/test_switch_id.c @@ -31,7 +31,47 @@ static const struct { { NULL, 0 } }; +/* Returns the first port that we think we can bind to without special + * permissions. Usually this function returns 1024. */ +static uint16_t +unprivileged_port_range_start(void) +{ + uint16_t result = 1024; + +#if defined(__linux__) + char *content = NULL; + + content = read_file_to_str( + "/proc/sys/net/ipv4/ip_unprivileged_port_start", + 0, + NULL); + + if (content != NULL) { + int ok = 1; + uint16_t tmp_result; + + tmp_result = (uint16_t)tor_parse_long(content, 10, 0, 65535, &ok, NULL); + + if (ok) { + result = tmp_result; + } else { + fprintf(stderr, + "Unable to convert ip_unprivileged_port_start to integer: %s\n", + content); + } + } + + tor_free(content); +#endif /* defined(__linux__) */ + + return result; +} + #if !defined(_WIN32) + +#define PORT_TEST_RANGE_START 600 +#define PORT_TEST_RANGE_END 1024 + /* 0 on no, 1 on yes, -1 on failure. */ static int check_can_bind_low_ports(void) @@ -41,7 +81,7 @@ check_can_bind_low_ports(void) memset(&sin, 0, sizeof(sin)); sin.sin_family = AF_INET; - for (port = 600; port < 1024; ++port) { + for (port = PORT_TEST_RANGE_START; port < PORT_TEST_RANGE_END; ++port) { sin.sin_port = htons(port); tor_socket_t fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); if (! SOCKET_OK(fd)) { @@ -149,10 +189,24 @@ main(int argc, char **argv) /* Succeed if we can do a setuid with capability retention, and doing so * does not make us lose the ability to bind low ports */ { - int keepcaps = (test_id == TEST_SETUID_KEEPCAPS); + const int keepcaps = (test_id == TEST_SETUID_KEEPCAPS); okay = switch_id(username, keepcaps ? SWITCH_ID_KEEP_BINDLOW : 0) == 0; + if (okay) { - okay = check_can_bind_low_ports() == keepcaps; + /* Only run this check if there are ports we may not be able to bind + * to. */ + const uint16_t min_port = unprivileged_port_range_start(); + + if (min_port >= PORT_TEST_RANGE_START && + min_port < PORT_TEST_RANGE_END) { + okay = check_can_bind_low_ports() == keepcaps; + } else { + fprintf(stderr, + "Skipping check for whether we can bind to any " + "privileged ports as the user system seems to " + "allow us to bind to ports even without any " + "capabilities set.\n"); + } } break; }

1 0

[tor/main] Force amd64 for CI builds.
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit 84d6f977e72aa71c19c65c9a8fa3ff922854510b Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Sep 13 18:05:58 2021 +0200 Force amd64 for CI builds. --- .gitlab-ci.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 1e9d03caf5..915f242f26 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -37,6 +37,12 @@ variables: paths: - artifacts/ + +# This template is used for x86-64 builds. +.x86-64-template: &x86-64-template + tags: + - amd64 + # This template should be usable on any system that's based on apt. .apt-template: &apt-template | export LC_ALL=C.UTF-8 @@ -57,6 +63,7 @@ variables: # This template sets us up for Debian system in particular. .debian-template: &debian-template <<: *artifacts-template + <<: *x86-64-template variables: DEBIAN_FRONTEND: "noninteractive" # TODO: Using "cache" in this way speeds up our downloads. It would be

1 0

[tor/main] Merge branch 'maint-0.4.5' into maint-0.4.6
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit f728e09ebe611d6858e721eaa37637025bfbf259 Merge: 2be49cdbe5 0dbb2f53b9 Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Sep 13 13:34:48 2021 -0400 Merge branch 'maint-0.4.5' into maint-0.4.6 .gitlab-ci.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[tor/main] Merge branch 'maint-0.3.5' into maint-0.4.5
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit 0dbb2f53b933cb089ed18d72717bbf10938ffa76 Merge: da9ff3936d fcef8e3f75 Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Sep 13 13:34:44 2021 -0400 Merge branch 'maint-0.3.5' into maint-0.4.5 .gitlab-ci.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[tor/main] Merge branch 'maint-0.4.6'
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit 7440a38846d78c2b9040f117fdc4b823cdee4a27 Merge: eac7bdce91 f728e09ebe Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Sep 13 13:34:48 2021 -0400 Merge branch 'maint-0.4.6' .gitlab-ci.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[tor/maint-0.3.5] Use Debian bullseye for our hardened build.
by dgoulet＠torproject.org 13 Sep '21

13 Sep '21

commit 12b64845aebf08e45db94e5610d0ced95b5c1667 Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Aug 16 13:52:58 2021 +0000 Use Debian bullseye for our hardened build. --- .gitlab-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 915f242f26..b83079aa4a 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -117,7 +117,7 @@ debian-minimal: # # TODO: This will be faster once we merge #40098 and #40099. debian-hardened: - image: debian:testing + image: debian:bullseye <<: *debian-template variables: ALL_BUGS_ARE_FATAL: "yes"

1 0