[tor-bugs] #15649 [general]: [feature suggestion] Tor control protocol should listen on privileged UNIX domain socket and allow an unauthenticated administration there

Mon Apr 13 20:05:01 UTC 2015

#15649: [feature suggestion] Tor control protocol should listen on privileged UNIX
domain socket and allow an unauthenticated administration there
-----------------------------+-----------------
     Reporter:  yurivict271  |      Owner:
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  general      |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------

Comment (by yurivict271):

 So there are several parts to this proposal.

 * First part is that ControlPort protocol should work through the UNIX
 domain socket, I don't think anybody can disagree that this is a better
 solution, compared to the localhost port.

 There are two points that appear to cause disagreement here:
 * Weather ControlPort should be always on, by default
 * Weather root should be given the right of authentication-free operation

 I believe both should be implemented, because both don't cause any
 security problems, and at the same time make tor to interface with other
 systems smoother.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15649#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online