[tor-bugs] #6912 [- Select a component]: CookieAuthentication default: 1 ? (0.2.4.2)

[Tor Bug Tracker & Wiki]

#6912: CookieAuthentication default: 1 ? (0.2.4.2)
----------------------------------+-----------------------------------------
 Reporter:  cypherpunkx           |          Owner:     
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:     
Component:  - Select a component  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------
 the manpage says:
 {{{
 CookieAuthentication 0|1
            If this option is set to 1, allow connections on the control
 port when the connecting process knows the contents of a file named
            "control_auth_cookie", which Tor will create in its data
 directory. This authentication method should only be used on systems with
 good
            filesystem security. (Default: 0)

 }}}

 so I'd expect if I'm only using
 {{{
 ControlPort 9051
 }}}
 (no CookieAuthentication, no HashedControlPassword)
 I should be able to connect to the controlport without any authentication
 but I get:

 {{{
 arm
 [Errno 13] Permission denied: '/var/run/tor/control.authcookie'
 }}}

 Explicitely adding the default to torrc:
 {{{
 CookieAuthentication 0
 }}}

 solves the problem. Does this mean that the manpage is misleading and
 should be?

 {{{
 CookieAuthentication 0|1
            If this option is set to 1, allow connections on the control
 port when the connecting process knows the contents of a file named
            "control_auth_cookie", which Tor will create in its data
 directory. This authentication method should only be used on systems with
 good
            filesystem security. (Default: *1*)
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6912>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online