[tor-bugs] #15649 [general]: [feature suggestion] Tor control protocol should listen on privileged UNIX domain socket and allow an unauthenticated administration there

[Tor Bug Tracker & Wiki]

#15649: [feature suggestion] Tor control protocol should listen on privileged UNIX
domain socket and allow an unauthenticated administration there
-----------------------------+-----------------
     Reporter:  yurivict271  |      Owner:
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  general      |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------

Comment (by meejah):

 I think the correct way to make this stuff work is via a controller that
 uses cookie (or password) authentication and exposes the functionality you
 want.

 Right now, you could install https://carml.readthedocs.org/en/latest/ for
 example and do "carml cmd setconf 'foo=bar'". You can also pipe a series
 of controller commands through carml.

 That likely isn't the only controller that can do similar things, but it
 shows the safer way to do this, which is to enable cookie authentication
 and use a controller that speaks that authentication.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15649#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online