[tor-bugs] #13904 [Stem]: Tests fail on Gentoo

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Dec 11 16:35:31 UTC 2014


#13904: Tests fail on Gentoo
------------------------+----------------------
     Reporter:  toralf  |      Owner:  atagar
         Type:  defect  |     Status:  reopened
     Priority:  normal  |  Milestone:
    Component:  Stem    |    Version:
   Resolution:          |   Keywords:  testing
Actual Points:          |  Parent ID:
       Points:          |
------------------------+----------------------

Comment (by atagar):

 > yeah - good progress, no I just got this

 Oops! Mistake on my part - fixed. Does it now work?

 > It is the hardened kernel here (grsecurity in this case), which
 restricts capabilities (I'm convinced, it makes sense to run a hardened
 kernel, especially if somebody runs a tor relay)

 I'd argue it's a bug with grsecurity. If a process lacks read permissions
 for a resource then it should reflect that in the filesystem permissions.
 Grsecurity looks to be lying to processes by saying 'You totally have read
 access for the proc resources! But... you can't read the proc resources.'

 This is my first time running into grsecurity which is why it's conflating
 with Gentoo for me. On reflection these 'is_gentoo()' checks should really
 be 'is_grsecurity()' - is there an easy method for detecting it?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13904#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list