commit 2b15ff66ecc2d528a546af266dffeb49404369aa Author: Nathan Freitas nathan@freitas.net Date: Sun Jan 15 10:45:18 2012 -0500
more updates to limit localhost port access --- .../torproject/android/service/TorTransProxy.java | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
diff --git a/src/org/torproject/android/service/TorTransProxy.java b/src/org/torproject/android/service/TorTransProxy.java index aed3a02..e5ba732 100644 --- a/src/org/torproject/android/service/TorTransProxy.java +++ b/src/org/torproject/android/service/TorTransProxy.java @@ -454,6 +454,8 @@ public class TorTransProxy implements TorServiceConstants { script.append(ipTablesPath); script.append(" -t filter"); script.append(" -A OUTPUT"); + script.append(" -m owner ! --uid-owner "); + script.append(torUid); script.append(" -p tcp"); script.append(" -d 127.0.0.1"); script.append(" --dport ");