[tor-bugs] #8195 [Tor]: tor and capabilities
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Feb 24 17:29:12 UTC 2014
#8195: tor and capabilities
-----------------------------+--------------------------------
Reporter: weasel | Owner:
Type: enhancement | Status: needs_revision
Priority: normal | Milestone: Tor: 0.2.5.x-final
Component: Tor | Version:
Resolution: | Keywords: tor-relay security
Actual Points: | Parent ID:
Points: |
-----------------------------+--------------------------------
Comment (by nickm):
Are you sure we need CAP_CHOWN? According to the capabilities(7) manpage:
{{{
CAP_CHOWN
Make arbitrary changes to file UIDs and GIDs (see chown(2)).
}}}
It sounds like that would allow the Tor process to do "chown nickm
/etc/shadow" , which is probably not what we want. ;)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8195#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list