[tor-bugs] #11477 [Tor]: Make --enable-expensive-hardening work with sandbox

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu May 15 01:49:28 UTC 2014


#11477: Make --enable-expensive-hardening work with sandbox
------------------------+--------------------------------------------------
     Reporter:  nickm   |      Owner:  nickm
         Type:  defect  |     Status:  assigned
     Priority:  normal  |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  tor-relay 025-triaged 025-deferrable
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------------------------------------

Comment (by alphawolf):

 Replying to [comment:12 nickm]:
 > This is with --enable-expensive-hardening and with sandboxing, and it
 doesn't happen with sandboxing only on this computer?

 Correct.  This is the exact same setup as used in testing #11946.  The
 patch for 11946 allows tor to run sandboxed without issue, but recompiling
 with `--enable-expensive-hardening` causes a stack trace consistently
 (three times) at 80% bootstrapped.

 > Is this also with 'User' and 'RunAsDaemon', or any other options that
 debian likes to set?

 Yes, all of the above, and using the init.d script.  I can copy torrc,
 etc, here if you'd like, but they are the same as in #11946.  I can test
 in other ways if you'd like; I just like to mimic the Debian package since
 that's what most end users will experience.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11477#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list