[tor-bugs] #18371 [Tor Browser]: TorBrowser.app.meek-http-helper symlinks incompatible with Gatekeeper signing

[Tor Bug Tracker & Wiki]

#18371: TorBrowser.app.meek-http-helper symlinks incompatible with Gatekeeper
signing
-------------------------+------------------------------
 Reporter:  mcs          |          Owner:  mcs
     Type:  defect       |         Status:  needs_review
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:  #13252       |         Points:
  Sponsor:               |
-------------------------+------------------------------

Comment (by dcf):

 Here are a few minor revisions I'd like to see:
  * Copy the profile to a temporary directory (ioutil.TempDir) and rename
 it atomically (os.Rename). Otherwise, the copy could fail halfway through
 but the os.Stat check in ensureProfileExists will be fooled.
  * Use filepath.Join to join path instead of string concatenation.
  * In copyFile, you can use os.OpenFile to avoid a separate call to
 os.Chmod.

 How do you want the tags to work? I'm assuming that a meek-client-
 torbrowser using this patch will only work in an alpha TB, not in a
 stable. So I'm thinking of making it a parallel branch, rather than
 extending master. (Maybe this is an argument for moving the meek-client-
 torbrowser code into the tor-browser-bundle repo.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18371#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online