[tor-bugs] #13880 [arm]: arm produces torrc with DisableDebuggerAttachment 0?

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Dec 2 20:03:06 UTC 2014


#13880: arm produces torrc with DisableDebuggerAttachment 0?
--------------------+------------------------
 Reporter:  teor    |          Owner:  atagar
     Type:  defect  |         Status:  new
 Priority:  normal  |      Milestone:
Component:  arm     |        Version:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
--------------------+------------------------
 So, there is an unconfirmed report on #tor that arm produces torrc files
 with DisableDebuggerAttachment 0. If that is the case, and there's no
 reason for it, we should stop doing that.

 <teor> tim_: also, why DisableDebuggerAttachment 0?
 <tim_> teor, I have in my configs not sure where it came from. if it
 doesn't really do anything I can remove it
 <teor> tim_: it reduces security by enabling debugger attachment to the
 tor process. This can be used by an adversary to extract keys.
 <murb> tim_: do you use arm?
 <tim_> murb: yes i use arm. i think that is where it came from
 <teor> tim_: hmm, I'd consider that a bug in arm

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13880>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list