[tor-bugs] #3374 [Torouter]: Torouter OS and configuration

[Tor Bug Tracker & Wiki]

#3374: Torouter OS and configuration
----------------------+-----------------------------------------------------
 Reporter:  runa      |          Owner:  runa
     Type:  task      |         Status:  new 
 Priority:  normal    |      Milestone:      
Component:  Torouter  |        Version:      
 Keywords:            |         Parent:      
   Points:            |   Actualpoints:      
----------------------+-----------------------------------------------------

Comment(by ioerror):

 In an ideal world, I'd suggest we may want to investigate finding a way
 for '''pump''' to drop privs or to replace pump with something written in
 a safe language. Additionally, I'd like to configure OpenSSH to only
 listen on eth1 - this means that there would only be three services on
 eth0 - a dhcp client, the ntp client, and Tor itself.

 I'd like to replace the ntp client with openntpd as there appears to be no
 safe python ntp client. This is a pretty good example of what we'd need in
 python for ntp:
 http://code.activestate.com/recipes/117211-simple-very-sntp-client/

 So all in all, I think we could probably replace both the ntp client and
 the dhcp client with something safe but it wouldn't be well tested for a
 while, obviously.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3374#comment:58>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online