[tor-bugs] #17901 [Tor]: Tor would bind ControlPort to public ip address if it has no localhost interface

[Tor Bug Tracker & Wiki]

#17901: Tor would bind ControlPort to public ip address if it has no localhost
interface
---------------------------------------+-----------------------------------
 Reporter:  s7r                        |          Owner:  teor
     Type:  defect                     |         Status:  assigned
 Priority:  High                       |      Milestone:  Tor:
Component:  Tor                        |  0.2.8.x-final
 Severity:  Major                      |        Version:  Tor: 0.2.7.6
 Keywords:  027-backport 026-backport  |     Resolution:
Parent ID:                             |  Actual Points:
  Sponsor:                             |         Points:
---------------------------------------+-----------------------------------

Comment (by teor):

 Replying to [comment:14 yawning]:
 > These seem ok.  I'd suggest allowing localhost to also be `[::1]` for
 the far future.

 See #11360.

 (I've also split off #17948 for the hidden service IPv4/IPv6 localhost
 changes, as it's in a different area of the code, and not security
 related.)

 > I'm vaguely inclined to also add an extra config option which needs to
 be enabled to allow non-localhost/`AF_UNIX` ControlPort, because it really
 is that bad of an idea, but that may be overly hand-holding.

 Another ticket?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17901#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online