- tor-commits - lists.torproject.org

[torbrowser/maint-2.2] eradicate polipo from the windows bundle
by erinn＠torproject.org 13 Jul '11

13 Jul '11

commit aee3d6e71cdd367b845b39aae851af3a4270f263 Author: Erinn Clark <erinn(a)torproject.org> Date: Wed Jul 13 10:02:58 2011 -0300 eradicate polipo from the windows bundle --- build-scripts/config/torrc | 1 + build-scripts/config/vidalia.conf.ff | 3 --- build-scripts/windows.mk | 16 +--------------- 3 files changed, 2 insertions(+), 18 deletions(-) diff --git a/build-scripts/config/torrc b/build-scripts/config/torrc index 2d63da9..29154fb 100644 --- a/build-scripts/config/torrc +++ b/build-scripts/config/torrc @@ -8,4 +8,5 @@ GeoIPFile .\Data\Tor\geoip Log notice stdout # Bind to this address to listen to connections from SOCKS-speaking # applications. +SocksPort 9050 SocksListenAddress 127.0.0.1 diff --git a/build-scripts/config/vidalia.conf.ff b/build-scripts/config/vidalia.conf.ff index ef312a8..03ed00a 100644 --- a/build-scripts/config/vidalia.conf.ff +++ b/build-scripts/config/vidalia.conf.ff @@ -2,9 +2,6 @@ BrowserDirectory=FirefoxPortable BrowserExecutable=tbb-firefox.exe LanguageCode=en -ProxyExecutable=.\\App\\polipo.exe -ProxyExecutableArguments=-c .\\Data\\Polipo\\polipo.conf -RunProxyAtStart=true [Tor] ControlPort=9051 diff --git a/build-scripts/windows.mk b/build-scripts/windows.mk index bf15a48..1836741 100644 --- a/build-scripts/windows.mk +++ b/build-scripts/windows.mk @@ -41,7 +41,6 @@ WIX_LIB="/c/Program Files (x86)/Windows Installer XML v3.5/bin" ## Location of bundle components VIDALIA=$(FETCH_DIR)/vidalia-$(VIDALIA_VER) TOR=$(FETCH_DIR)/tor-$(TOR_VER) -POLIPO=$(FETCH_DIR)/polipo-$(POLIPO_VER) FIREFOX=$(FETCH_DIR)/FirefoxPortable-$(FIREFOX_VER) PIDGIN=$(FETCH_DIR)/PidginPortable-$(PIDGIN_VER) @@ -95,12 +94,6 @@ build-libevent: cd $(LIBEVENT_DIR) && make -j2 cd $(LIBEVENT_DIR) && make install -POLIPO_DIR=$(FETCH_DIR)/polipo-$(POLIPO_VER) -POLIPO_MAKEFILE=$(CONFIG_SRC)/polipo-Makefile -POLIPO_LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase" -build-polipo: - cd $(POLIPO_DIR) && LDFLAGS=$(POLIPO_LDFLAGS) make && PREFIX=$(FETCH_DIR)/built/ make install.binary - TOR_DIR=$(FETCH_DIR)/tor-$(TOR_VER) TOR_CFLAGS="-O -g -I$(BUILT_DIR)/include" TOR_LDFLAGS="-L$(BUILT_DIR)/lib" @@ -230,7 +223,6 @@ reallyclean: clean virus-scan: $(VIRUSSCAN) $(VIDALIA)/build/src/vidalia/vidalia.exe - $(VIRUSSCAN) $(COMPILED_BINS)/polipo.exe $(VIRUSSCAN) $(TOR)/src/or/tor.exe $(VIRUSSCAN) $(TOR)/src/tools/tor-resolve.exe @@ -253,7 +245,6 @@ directory-structure: mkdir -p $(APPDIR) mkdir -p $(DATADIR)/Tor mkdir -p $(DATADIR)/Vidalia - mkdir -p $(DATADIR)/Polipo mkdir -p $(DOCSDIR) ## Package up all the Vidalia and Tor pre-requisites @@ -265,7 +256,6 @@ install-binaries: cp $(OPENSSL_LIB)/ssleay32.dll $(APPDIR) cp $(OPENSSL_LIB)/libeay32.dll $(APPDIR) cp $(VIDALIA)/build/src/vidalia/vidalia.exe $(APPDIR) - cp $(COMPILED_BINS)/polipo.exe $(APPDIR) cp $(TOR)/src/or/tor.exe $(TOR)/src/tools/tor-resolve.exe $(APPDIR) ## Fixup @@ -275,12 +265,10 @@ install-docs: mkdir -p $(DOCSDIR)/Tor mkdir -p $(DOCSDIR)/Qt mkdir -p $(DOCSDIR)/MinGW - mkdir -p $(DOCSDIR)/Polipo cp $(VIDALIA)/LICENSE* $(VIDALIA)/CREDITS $(DOCSDIR)/Vidalia cp $(TOR)/LICENSE $(TOR)/README $(DOCSDIR)/Tor cp $(QT_LIB)/../LICENSE.GPL* $(QT_LIB)/../LICENSE.LGPL $(DOCSDIR)/Qt cp $(MING)/../msys/1.0/share/doc/MSYS/COPYING $(DOCSDIR)/MinGW - cp $(POLIPO)/COPYING $(POLIPO)/README.Windows $(DOCSDIR)/Polipo cp ../changelog.win-2.2 $(DOCSDIR)/changelog cp ../README.WIN-2.2 $(DOCSDIR)/README-TorBrowserBundle @@ -294,7 +282,7 @@ ifeq ($(USE_PIDGIN),1) cp -r $(PIDGIN) $(DEST)/PidginPortable endif -## Configure Firefox, FirefoxPortable, Vidalia, Polipo and Tor +## Configure Firefox, FirefoxPortable, Vidalia, and Tor configure-apps: mkdir -p $(DEST)/FirefoxPortable/Data/profile @@ -323,8 +311,6 @@ ifeq ($(USE_PIDGIN),1) else cp $(CONFIG_SRC)/vidalia.conf.ff $(DEST)/Data/Vidalia/vidalia.conf endif - ## Configure Polipo - cp $(CONFIG_SRC)/polipo.conf $(DEST)/Data/Polipo ## Configure Tor cp $(CONFIG_SRC)/torrc $(DEST)/Data/Tor cp $(TOR)/src/config/geoip $(DEST)/Data/Tor

1 0

[torbrowser/maint-2.2] enable addon update checking for windows tbb
by erinn＠torproject.org 13 Jul '11

13 Jul '11

commit efe17a37d519fd544c22ac534a5bbbccfc9d5a7e Author: Erinn Clark <erinn(a)torproject.org> Date: Wed Jul 13 10:05:07 2011 -0300 enable addon update checking for windows tbb --- build-scripts/config/windows-4.0.js | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/build-scripts/config/windows-4.0.js b/build-scripts/config/windows-4.0.js index fc73c6c..13fda1f 100644 --- a/build-scripts/config/windows-4.0.js +++ b/build-scripts/config/windows-4.0.js @@ -62,7 +62,7 @@ user_pref("extensions.bprivacy.donotaskforfolder", true); user_pref("extensions.bprivacy.donotaskonexit", true); user_pref("extensions.bprivacy.initiated", true); user_pref("extensions.checkCompatibility.4.*", false); -user_pref("extensions.checkUpdateSecurity", false); +user_pref("extensions.checkUpdateSecurity", true); user_pref("extensions.databaseSchema", 3); user_pref("extensions.enabledAddons", "https-everywhere@eff.org:0.9.9.development.4,{73a6fe31-595d-460b-a920-fcc0f8843232}:2.1.0.3,{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.50,{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}:1.3.3-alpha"); user_pref("extensions.enabledItems", "langpack-en-US@firefox.mozilla.org:,{73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.9.57,{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}:1.2.4,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8"); @@ -88,8 +88,8 @@ user_pref("extensions.torbutton.startup", true); user_pref("extensions.torbutton.tor_enabled", true); user_pref("extensions.torbutton.tor_memory_jar", true); user_pref("extensions.torbutton.tz_string", "UTC+00:00"); -user_pref("extensions.update.enabled", false); -user_pref("extensions.update.notifyUser", false); +user_pref("extensions.update.enabled", true); +user_pref("extensions.update.notifyUser", true); user_pref("general.appname.override", "Netscape"); user_pref("general.appversion.override", "5.0 (Windows; en-US)"); user_pref("general.buildID.override", "0");

1 0

[torbrowser/maint-2.2] bump all firefox versions to 5.0.1
by erinn＠torproject.org 13 Jul '11

13 Jul '11

commit 57cd4944d034a04a413c0394b8a11329e9d3d989 Author: Erinn Clark <erinn(a)torproject.org> Date: Wed Jul 13 09:59:37 2011 -0300 bump all firefox versions to 5.0.1 --- README.LINUX-2.2 | 2 +- README.OSX-2.2 | 2 +- README.WIN-2.2 | 4 ++-- build-scripts/osx.mk | 4 ++-- build-scripts/versions.mk | 2 +- build-scripts/windows.mk | 2 +- changelog.linux-2.2 | 4 ++-- changelog.osx-2.2 | 6 ++++++ changelog.win-2.2 | 6 ++++++ 9 files changed, 22 insertions(+), 10 deletions(-) diff --git a/README.LINUX-2.2 b/README.LINUX-2.2 index ffb5a3a..c871c74 100644 --- a/README.LINUX-2.2 +++ b/README.LINUX-2.2 @@ -6,7 +6,7 @@ Included applications Vidalia 0.2.12 (with Qt 4.6.2) Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) -Firefox (Aurora) 5.0 +Firefox (Aurora) 5.0.1 \_ Torbutton 1.4.0 |_ NoScript 2.1.1.2 |_ HTTPS-Everywhere 1.0.0development.4 diff --git a/README.OSX-2.2 b/README.OSX-2.2 index 73661e0..88564a6 100644 --- a/README.OSX-2.2 +++ b/README.OSX-2.2 @@ -6,7 +6,7 @@ Included applications Vidalia 0.2.12 (with Qt 4.6.2) Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) -Firefox (Aurora) 5.0 +Firefox (Aurora) 5.0.1 \_ Torbutton 1.4.0 |_ NoScript 2.1.1.2 |_ HTTPS-Everywhere 1.0.0development.4 diff --git a/README.WIN-2.2 b/README.WIN-2.2 index 0c16957..dbe8ffb 100644 --- a/README.WIN-2.2 +++ b/README.WIN-2.2 @@ -6,8 +6,8 @@ Included applications Vidalia 0.2.12 (with Qt 4.6.2) Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) -FirefoxPortable 5.0 - \_ Firefox (Aurora) 5.0 +FirefoxPortable 5.0.1 + \_ Firefox (Aurora) 5.0.1 \_ Torbutton 1.4.0 |_ NoScript 2.1.1.2 |_ HTTPS-Everywhere 1.0.0development.4 diff --git a/build-scripts/osx.mk b/build-scripts/osx.mk index e8303f1..1a59db4 100644 --- a/build-scripts/osx.mk +++ b/build-scripts/osx.mk @@ -35,7 +35,7 @@ include $(PWD)/versions.mk ## Architecture -ARCH_TYPE=x86_64 +ARCH_TYPE=i386 ## Location of directory for source unpacking FETCH_DIR=$(PWD)/build-alpha-$(ARCH_TYPE) @@ -149,7 +149,7 @@ NAME=TorBrowser DISTDIR=tbbosx-alpha-dist ## Version and name of the compressed bundle (also used for source) -VERSION=$(RELEASE_VER)-1-alpha +VERSION=$(RELEASE_VER)-2-alpha DEFAULT_COMPRESSED_BASENAME=TorBrowser-$(VERSION)-osx-$(ARCH_TYPE)- IM_COMPRESSED_BASENAME=TorBrowser-IM-$(VERSION)- DEFAULT_COMPRESSED_NAME=$(DEFAULT_COMPRESSED_BASENAME) diff --git a/build-scripts/versions.mk b/build-scripts/versions.mk index 4dc8589..af23c30 100644 --- a/build-scripts/versions.mk +++ b/build-scripts/versions.mk @@ -3,7 +3,7 @@ RELEASE_VER=2.2.30 HTTPSEVERY_VER=1.0.0development.4 -FIREFOX_VER=5.0 +FIREFOX_VER=5.0.1 LIBEVENT_VER=2.0.12-stable LIBPNG_VER=1.4.3 NOSCRIPT_VER=2.1.1.2 diff --git a/build-scripts/windows.mk b/build-scripts/windows.mk index 4100940..bf15a48 100644 --- a/build-scripts/windows.mk +++ b/build-scripts/windows.mk @@ -144,7 +144,7 @@ NAME="Tor Browser" DISTDIR=tbbwin-alpha-dist ## Version and name of the compressed bundle (also used for source) -VERSION=$(RELEASE_VER)-1-alpha +VERSION=$(RELEASE_VER)-2-alpha DEFAULT_COMPRESSED_BASENAME=tor-browser-$(VERSION) IM_COMPRESSED_BASENAME=tor-im-browser-$(VERSION) DEFAULT_COMPRESSED_NAME=$(DEFAULT_COMPRESSED_BASENAME) diff --git a/changelog.linux-2.2 b/changelog.linux-2.2 index ab000f5..f9119c5 100644 --- a/changelog.linux-2.2 +++ b/changelog.linux-2.2 @@ -1,12 +1,12 @@ Tor Browser Bundle (2.2.30-1) alpha; suite=linux * Update Tor to 0.2.2.30-rc - * Update Firefox to 5.0 + * Update Firefox to 5.0.1 * Update Torbutton to 1.4.0 * Update HTTPS Everywhere to 1.0.0development.4 * Update NoScript to 2.1.1.2 - -- Erinn Clark <erinn(a)torproject.org> Tue Jul 12 19:26:17 ART 2011 + -- Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 Tor Browser Bundle (2.2.29-1) alpha; suite=linux diff --git a/changelog.osx-2.2 b/changelog.osx-2.2 index b5452de..888aaf5 100644 --- a/changelog.osx-2.2 +++ b/changelog.osx-2.2 @@ -1,3 +1,9 @@ +Tor Browser Bundle (2.2.30-2) alpha; suite=osx + + * Update Firefox to 5.0.1 + + - Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 + Tor Browser Bundle (2.2.30-1) alpha; suite=osx * Update Tor to 0.2.2.30-rc diff --git a/changelog.win-2.2 b/changelog.win-2.2 index ba6ce71..ee916bc 100644 --- a/changelog.win-2.2 +++ b/changelog.win-2.2 @@ -1,3 +1,9 @@ +Tor Browser Bundle (2.2.30-2) alpha; suite=windows + + * Update Firefox to 5.0.1 + + - Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 + Tor Browser Bundle (2.2.30-1) alpha; suite=windows * Update Tor to 0.2.2.30-rc

1 0

[metrics-web/master] Let users download votes from a given valid-after time.
by karsten＠torproject.org 13 Jul '11

13 Jul '11

commit b7f0ba813e9468c1635457a513a77496d62aed23 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Wed Jul 13 13:12:41 2011 +0200 Let users download votes from a given valid-after time. --- ChangeLog | 1 + etc/web.xml | 11 +++ src/org/torproject/ernie/web/VotesServlet.java | 110 ++++++++++++++++++++++++ 3 files changed, 122 insertions(+), 0 deletions(-) diff --git a/ChangeLog b/ChangeLog index 94884cf..387e813 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,7 @@ Metrics database and website change log: Changes in version 0.0.2 - 2011-??-?? + - Let users download votes from a given valid-after time. Changes in version 0.0.1 - 2011-06-08 - Initial release diff --git a/etc/web.xml b/etc/web.xml index 688e6f3..dbaa0a2 100644 --- a/etc/web.xml +++ b/etc/web.xml @@ -299,6 +299,17 @@ </servlet-mapping> <servlet> + <servlet-name>Votes</servlet-name> + <servlet-class> + org.torproject.ernie.web.VotesServlet + </servlet-class> + </servlet> + <servlet-mapping> + <servlet-name>Votes</servlet-name> + <url-pattern>/votes</url-pattern> + </servlet-mapping> + + <servlet> <servlet-name>ErnieGeneratedFile</servlet-name> <servlet-class> org.torproject.ernie.web.ErnieGeneratedFileServlet diff --git a/src/org/torproject/ernie/web/VotesServlet.java b/src/org/torproject/ernie/web/VotesServlet.java new file mode 100644 index 0000000..3af9705 --- /dev/null +++ b/src/org/torproject/ernie/web/VotesServlet.java @@ -0,0 +1,110 @@ +package org.torproject.ernie.web; + +import java.io.*; +import java.sql.*; +import java.text.*; +import java.util.*; +import java.util.logging.*; + +import javax.naming.*; +import javax.servlet.*; +import javax.servlet.http.*; +import javax.sql.*; + +public class VotesServlet extends HttpServlet { + + private DataSource ds; + + private Logger logger; + + public void init() { + + /* Initialize logger. */ + this.logger = Logger.getLogger(VotesServlet.class.toString()); + + /* Look up data source. */ + try { + Context cxt = new InitialContext(); + this.ds = (DataSource) cxt.lookup("java:comp/env/jdbc/tordir"); + this.logger.info("Successfully looked up data source."); + } catch (NamingException e) { + this.logger.log(Level.WARNING, "Could not look up data source", e); + } + } + + public void doGet(HttpServletRequest request, + HttpServletResponse response) throws IOException, + ServletException { + + /* Check valid-after parameter. */ + String validAfterParameter = request.getParameter("valid-after"); + if (validAfterParameter == null || + validAfterParameter.length() != "yyyy-MM-dd-HH-mm-ss".length()) { + response.sendError(HttpServletResponse.SC_BAD_REQUEST); + return; + } + SimpleDateFormat parameterFormat = new SimpleDateFormat( + "yyyy-MM-dd-HH-mm-ss"); + parameterFormat.setTimeZone(TimeZone.getTimeZone("UTC")); + long parsedTimestamp = -1L; + try { + parsedTimestamp = parameterFormat.parse(validAfterParameter). + getTime(); + } catch (ParseException e) { + response.sendError(HttpServletResponse.SC_BAD_REQUEST); + return; + } + if (parsedTimestamp < 0L) { + response.sendError(HttpServletResponse.SC_BAD_REQUEST); + return; + } + + /* Look up consensus in the database. */ + SimpleDateFormat databaseFormat = new SimpleDateFormat( + "yyyy-MM-dd HH:mm:ss"); + databaseFormat.setTimeZone(TimeZone.getTimeZone("UTC")); + String databaseParameter = databaseFormat.format(parsedTimestamp); + List<byte[]> rawDescriptors = new ArrayList<byte[]>(); + try { + Connection conn = this.ds.getConnection(); + Statement statement = conn.createStatement(); + String query = "SELECT rawdesc FROM vote " + + "WHERE validafter = '" + databaseParameter + "'"; + ResultSet rs = statement.executeQuery(query); + while (rs.next()) { + rawDescriptors.add(rs.getBytes(1)); + } + rs.close(); + statement.close(); + conn.close(); + } catch (SQLException e) { + response.sendError(HttpServletResponse.SC_INTERNAL_SERVER_ERROR); + return; + } + + /* Write response. */ + if (rawDescriptors.size() == 0) { + response.sendError(HttpServletResponse.SC_NOT_FOUND); + return; + } + try { + response.setContentType("text/plain"); + int responseLength = 0; + for (byte[] rawDescriptor : rawDescriptors) { + responseLength += rawDescriptor.length; + } + response.setHeader("Content-Length", String.valueOf( + responseLength)); + response.setHeader("Content-Disposition", "inline; filename=\"" + + validAfterParameter + "-votes\""); + BufferedOutputStream output = new BufferedOutputStream( + response.getOutputStream()); + for (byte[] rawDescriptor : rawDescriptors) { + output.write(rawDescriptor); + } + } finally { + /* Nothing to do here. */ + } + } +} +

1 0

[arm/master] fix: instructions for root tor setup truncated
by atagar＠torproject.org 13 Jul '11

13 Jul '11

commit cc4b1a801a8e5434e429c8f49781917891bf9510 Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Jul 13 00:47:09 2011 -0700 fix: instructions for root tor setup truncated The default configuration had a limit that cropped part of the root tor setup instructions. --- armrc.sample | 2 +- src/cli/logPanel.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/armrc.sample b/armrc.sample index 0a7b0e1..1edd024 100644 --- a/armrc.sample +++ b/armrc.sample @@ -90,7 +90,7 @@ features.allowDetachedStartup true features.log.showDateDividers true features.log.showDuplicateEntries false features.log.entryDuration 7 -features.log.maxLinesPerEntry 4 +features.log.maxLinesPerEntry 6 features.log.prepopulate true features.log.prepopulateReadLimit 5000 features.log.maxRefreshRate 300 diff --git a/src/cli/logPanel.py b/src/cli/logPanel.py index 6da0901..2e0d038 100644 --- a/src/cli/logPanel.py +++ b/src/cli/logPanel.py @@ -44,7 +44,7 @@ DEFAULT_CONFIG = {"features.logFile": "", "features.log.showDateDividers": True, "features.log.showDuplicateEntries": False, "features.log.entryDuration": 7, - "features.log.maxLinesPerEntry": 4, + "features.log.maxLinesPerEntry": 6, "features.log.prepopulate": True, "features.log.prepopulateReadLimit": 5000, "features.log.maxRefreshRate": 300,

1 0

[arm/master] Remaining work for using tor with privileged ports
by atagar＠torproject.org 13 Jul '11

13 Jul '11

commit 21131c72f8b1e3e8605f5153dab1c779ef8f24f2 Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Jul 13 00:35:07 2011 -0700 Remaining work for using tor with privileged ports Filling in the starter shell script and a variety of other fixes to make tor instances needing root startup permissions work nicely. --- src/cli/controller.py | 2 +- src/cli/wizard.py | 14 ++++++++------ src/resources/startTor | 38 ++++++++++++++++++++++++++------------ src/resources/torrcTemplate.txt | 7 ++++--- src/settings.cfg | 2 +- 5 files changed, 40 insertions(+), 23 deletions(-) diff --git a/src/cli/controller.py b/src/cli/controller.py index d4fcf2f..e8b28cc 100644 --- a/src/cli/controller.py +++ b/src/cli/controller.py @@ -523,7 +523,7 @@ class TorManager: torctlConn, authType, authValue = TorCtl.preauth_connect(controlPort = int(CONFIG["wizard.default"]["Control"])) if not torctlConn: - msg = "Unable to start tor, try running \"tor -f %s\" to see the error output" % torrcLoc + msg = "Unable to start tor, try running \"tor -f %s\" to see the error output" % self.getTorrcPath() raise IOError(msg) if authType == TorCtl.AUTH_TYPE.COOKIE: diff --git a/src/cli/wizard.py b/src/cli/wizard.py index 032cb92..08e9d0b 100644 --- a/src/cli/wizard.py +++ b/src/cli/wizard.py @@ -8,14 +8,13 @@ import os import sys import random import shutil +import getpass import functools import curses import cli.popups import cli.controller -from TorCtl import TorCtl - from util import connections, enum, log, sysTools, torConfig, torTools, uiTools # template used to generate the torrc @@ -384,7 +383,7 @@ def showWizard(): dst = "%sstartTor" % dataDir if not os.path.exists(dst): shutil.copy(src, dst) - msg = "Tor needs root permissions to start with this configuration (it will drop itself to a 'tor-arm' user afterward). To continue...\n- open another terminal\n- run \"sudo %s\"\n- press 'r' here to tell arm to reconnect" % dst + msg = "Tor needs root permissions to start with this configuration (it will drop itself to the current user afterward). To continue...\n- open another terminal\n- run \"sudo %s\"\n- press 'r' here to tell arm to reconnect" % dst log.log(log.NOTICE, msg) break @@ -590,7 +589,7 @@ def getTorrc(relayType, config, disabledOpt): templateOptions[key.upper()] = value templateOptions[relayType.upper()] = True - templateOptions["LOW_PORTS"] = config[Options.LOWPORTS] + templateOptions["LOW_PORTS"] = config[Options.LOWPORTS].getValue() # uses double the relay rate for bursts bwOpt = Options.BANDWIDTH.upper() @@ -599,10 +598,13 @@ def getTorrc(relayType, config, disabledOpt): relayRateComp = templateOptions[bwOpt].split(" ") templateOptions["BURST"] = "%i %s" % (int(relayRateComp[0]) * 2, " ".join(relayRateComp[1:])) - # exit notice will be in our data directory + # paths for our tor related resources + dataDir = cli.controller.getController().getDataDirectory() - templateOptions["NOTICE_PATH"] = dataDir + "exitNotice/index.html" + templateOptions["NOTICE_PATH"] = "%sexitNotice/index.html" % dataDir templateOptions["LOG_ENTRY"] = "notice file %stor_log" % dataDir + templateOptions["DATA_DIR"] = "%stor_data" % dataDir + templateOptions["USERNAME"] = getpass.getuser() policyCategories = [] if not config[Options.POLICY].getValue(): diff --git a/src/resources/startTor b/src/resources/startTor index c575c23..812a75a 100755 --- a/src/resources/startTor +++ b/src/resources/startTor @@ -1,14 +1,28 @@ #!/bin/sh -# -# When binding to privilaged ports the tor process needs to start with root -# permissions, then lower the user it's running as afterward. This script -# simply makes a "tor-arm" user if it doesn't already exist then starts the -# tor process. - -# TODO: check if the user's running as root -# TODO: check if the tor-arm user exists and if not, make it -# TODO: run arm -# TODO: bonus points: double check that the torrc in this directory has a -# "User tor-arm" entry - this would be a problem if they run the wizard -# without low ports, then use this script + +# When binding to privileged ports the tor process needs to start with root +# permissions, then lower the user it's running as afterward. + +# checks that we're running as root + +if [ "$(id -u)" != "0" ]; then + printf "This script needs root permissions to run. Try again with \"sudo ${0}\".\n\n" + exit 1 +fi + +# Checks that the torrc in this directory has a "User <username>" entry. If +# they ran the wizard multiple times then we might currently have a torrc +# without it, causing this to run tor as root (... not what we wanted). + +torrcLoc=$( dirname "$0" )/torrc +if ! `grep -q "^User " ${torrcLoc}`; then + printf "The tor configuration file (${torrcLoc}) doesn't lower its\n" + printf "permissions. You should only be using this script to run tor instances that\n" + printf "need root permissions to start.\n\n" + exit 1 +fi + +# starts the tor process + +tor --quiet -f $torrcLoc& diff --git a/src/resources/torrcTemplate.txt b/src/resources/torrcTemplate.txt index d23ed0b..20b2efa 100644 --- a/src/resources/torrcTemplate.txt +++ b/src/resources/torrcTemplate.txt @@ -4,7 +4,7 @@ # - run 'pkill -sighup tor' # - restart tor # -# Descriptions of all of these configuraiton attibutes (and many more) are +# Descriptions of all of these configuration attributes (and many more) are # available in the tor man page. [IF SHUTDOWN] @@ -14,15 +14,16 @@ [END IF] [NEWLINE] +DataDirectory [DATA_DIR] # location to store runtime data +Log [LOG_ENTRY] # location to log notices, warnings, and errors ControlPort 9052 # port controllers can connect to CookieAuthentication 1 # method for controller authentication -Log [LOG_ENTRY] # location to log notices, warnings, and errors [IF RELAY | EXIT | BRIDGE] RunAsDaemon 1 # runs as a background process [IF LOWPORTS] - User tor-arm # lowers our permissions to this user + User [USERNAME] # lowers our permissions to this user [END IF] [END IF] [NEWLINE] diff --git a/src/settings.cfg b/src/settings.cfg index c6d483d..7e13d19 100644 --- a/src/settings.cfg +++ b/src/settings.cfg @@ -447,7 +447,7 @@ wizard.description.opt Notify => Sends automated email notifications to the abov wizard.description.opt Bandwidth => Limit for the average rate at which you relay traffic. wizard.description.opt Limit => Maximum amount of traffic to relay each month. Some ISPs, like Comcast, cap their customer's Internet usage so this is an easy way of staying below that limit. wizard.description.opt Client => Enable this if you would like to use Tor yourself. This opens or closes the SOCKS port used by applications for connecting to Tor. -wizard.description.opt Lowports => Relays using port 443 rather than 9001. This helps some users that would otherwise be blocked, but requires that tor is started with root permissions (after that it lowers itself to those of a 'tor-arm' user). +wizard.description.opt Lowports => Relays using port 443 rather than 9001. This helps some users that would otherwise be blocked, but requires that tor is started with root permissions (after that it lowers itself to those of the current user). wizard.description.opt Portforward => If needed, attempts NAT traversal using UPnP and NAT-PMP. This allows for automatic port forwarding on most home routers. wizard.description.opt Startup => Runs Tor in the background when the system starts. wizard.description.opt Rshutdown => When you quit arm the Tor process is stopped thirty seconds later. This delay is so people using you can gracefully switch their circuits.

1 0

[torbrowser/master] bump tbb osx to 1.0.21 to fix incorrect https-everywhere version
by erinn＠torproject.org 12 Jul '11

12 Jul '11

commit cd046bcb6796af6efb9823513ee0b64bcb7d0762 Author: Erinn Clark <erinn(a)torproject.org> Date: Tue Jul 12 19:24:28 2011 -0300 bump tbb osx to 1.0.21 to fix incorrect https-everywhere version --- README.OSX | 4 ++++ build-scripts/osx.mk | 2 +- 2 files changed, 5 insertions(+), 1 deletions(-) diff --git a/README.OSX b/README.OSX index 6cd757c..3a05c7a 100644 --- a/README.OSX +++ b/README.OSX @@ -24,6 +24,10 @@ To exit, close Firefox and Vidalia. Changelog --------- +1.0.21: Released 2011-07-12 + The new HTTPS-Everywhere was missing from the last release. Actually + add it this time. + 1.0.20: Released 2011-07-10 Update Tor to 0.2.2.30-rc Update Firefox to 3.6.18 diff --git a/build-scripts/osx.mk b/build-scripts/osx.mk index 2fa0a4d..9096537 100644 --- a/build-scripts/osx.mk +++ b/build-scripts/osx.mk @@ -211,7 +211,7 @@ NAME=TorBrowser DISTDIR=tbbosx-dist ## Version and name of the compressed bundle (also used for source) -VERSION=1.0.20-dev +VERSION=1.0.21-dev DEFAULT_COMPRESSED_BASENAME=TorBrowser-$(VERSION)-osx-$(ARCH_TYPE)- IM_COMPRESSED_BASENAME=TorBrowser-IM-$(VERSION)- DEFAULT_COMPRESSED_NAME=$(DEFAULT_COMPRESSED_BASENAME)

1 0

[torbrowser/maint-2.2] Add missing header to intermediate cert store patch
by erinn＠torproject.org 12 Jul '11

12 Jul '11

commit 7e288fdc4bdac4e4533f2cdc09bd0a7ec47ffdac Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sun Jul 10 00:06:12 2011 +0200 Add missing header to intermediate cert store patch The patch omitted the changes necessary in nsNSSComponent.h and only contained the changes for nsNSSComponent.cpp. This would mean that the patch could be applied, but the build failed. Add the missing part of the patch. --- ...-Make-Intermediate-Cert-Store-memory-only.patch | 17 +++++++++++++++++ 1 files changed, 17 insertions(+), 0 deletions(-) diff --git a/src/current-patches/0002-Firefox5-Make-Intermediate-Cert-Store-memory-only.patch b/src/current-patches/0002-Firefox5-Make-Intermediate-Cert-Store-memory-only.patch index 17ad3a2..2bd11e8 100644 --- a/src/current-patches/0002-Firefox5-Make-Intermediate-Cert-Store-memory-only.patch +++ b/src/current-patches/0002-Firefox5-Make-Intermediate-Cert-Store-memory-only.patch @@ -278,6 +278,23 @@ index d3ae772..fa37ace 100644 } void +--- a/security/manager/ssl/src/nsNSSComponent.h ++++ b/security/manager/ssl/src/nsNSSComponent.h +@@ -321,10 +321,10 @@ + + // Methods that we use to handle the profile change notifications (and to + // synthesize a full profile change when we're just doing a profile startup): +- void DoProfileApproveChange(nsISupports* aSubject); ++ PRBool DoProfileApproveChange(nsISupports* aSubject); + void DoProfileChangeNetTeardown(); +- void DoProfileChangeTeardown(nsISupports* aSubject); +- void DoProfileBeforeChange(nsISupports* aSubject); ++ PRBool DoProfileChangeTeardown(nsISupports* aSubject); ++ PRBool DoProfileBeforeChange(nsISupports* aSubject); + void DoProfileChangeNetRestore(); + + Mutex mutex; + -- 1.7.3.4

1 0

[torbrowser/maint-2.2] update changelog and readme for osx tbb 2.2.30
by erinn＠torproject.org 12 Jul '11

12 Jul '11

commit cf28c99e8ef15655b16b2059ab2672f49778b751 Author: Erinn Clark <erinn(a)torproject.org> Date: Sun Jul 10 09:01:28 2011 -0300 update changelog and readme for osx tbb 2.2.30 --- README.OSX-2.2 | 10 +++++----- changelog.osx-2.2 | 10 ++++++++++ 2 files changed, 15 insertions(+), 5 deletions(-) diff --git a/README.OSX-2.2 b/README.OSX-2.2 index 949dd7e..73661e0 100644 --- a/README.OSX-2.2 +++ b/README.OSX-2.2 @@ -5,11 +5,11 @@ Included applications --------------------- Vidalia 0.2.12 (with Qt 4.6.2) -Tor 0.2.2.29-beta (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) -Firefox (Tumucumaque) 4.0.1 - \_ Torbutton 1.3.3-alpha - |_ NoScript 2.1.1.1 - |_ HTTPS-Everywhere 0.9.9.development.6 +Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) +Firefox (Aurora) 5.0 + \_ Torbutton 1.4.0 + |_ NoScript 2.1.1.2 + |_ HTTPS-Everywhere 1.0.0development.4 |_ BetterPrivacy 1.51 Usage diff --git a/changelog.osx-2.2 b/changelog.osx-2.2 index b4ab673..b5452de 100644 --- a/changelog.osx-2.2 +++ b/changelog.osx-2.2 @@ -1,3 +1,13 @@ +Tor Browser Bundle (2.2.30-1) alpha; suite=osx + + * Update Tor to 0.2.2.30-rc + * Update Firefox to 5.0 + * Update Torbutton to 1.4.0 + * Update HTTPS Everywhere to 1.0.0development.4 + * Update NoScript to 2.1.1.2 + + -- Erinn Clark <erinn(a)torproject.org> Sun Jul 10 08:59:52 ART 2011 + Tor Browser Bundle (2.2.29-1) alpha; suite=osx * Update Tor to 0.2.2.29-beta

1 0

[torbrowser/maint-2.2] add torbutton target back to makefile now that I no longer need to change the privoxy setting
by erinn＠torproject.org 12 Jul '11

12 Jul '11

commit 350e140f1b3dbef7f2f6004961cb816013cc1089 Author: Erinn Clark <erinn(a)torproject.org> Date: Sun Jul 10 09:02:31 2011 -0300 add torbutton target back to makefile now that I no longer need to change the privoxy setting --- build-scripts/osx.mk | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/build-scripts/osx.mk b/build-scripts/osx.mk index 5f00421..e8303f1 100644 --- a/build-scripts/osx.mk +++ b/build-scripts/osx.mk @@ -315,8 +315,8 @@ strip-it-stripper: ## ## Torbutton development version -#torbutton.xpi: -# $(WGET) --no-check-certificate -O $@ $(TORBUTTON) +torbutton.xpi: + $(WGET) --no-check-certificate -O $@ $(TORBUTTON) ## BetterPrivacy betterprivacy.xpi:

1 0