[tor-bugs] #10702 [arm]: arm tells users to "sudo -u debian-tor arm", which lets arm read tor's keys

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Apr 24 00:47:11 UTC 2014


#10702: arm tells users to "sudo -u debian-tor arm", which lets arm read tor's keys
------------------------+--------------------
     Reporter:  arma    |      Owner:  atagar
         Type:  defect  |     Status:  new
     Priority:  normal  |  Milestone:
    Component:  arm     |    Version:
   Resolution:          |   Keywords:
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------

Comment (by atagar):

 * [https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/172
 -circ-getinfo-option.txt 172-circ-getinfo-option.txt]
 * [https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/173
 -getinfo-option-expansion.txt 173-getinfo-option-expansion.txt]

 ... though not sure how relevant they still are (I wrote those back in
 2010). Looks like it includes state information, which arm presently
 retrieves from the DataDir.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10702#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list