[tor-bugs] #18608 [Tor]: Limiting ADD_ONION TARGET access.

Mon Mar 21 22:05:55 UTC 2016

#18608: Limiting ADD_ONION TARGET access.
-----------------------------+-----------------
     Reporter:  cypherpunks  |      Owner:
         Type:  defect       |     Status:  new
     Priority:  Medium       |  Milestone:
    Component:  Tor          |    Version:
     Severity:  Normal       |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |   Reviewer:
      Sponsor:  SponsorR     |
-----------------------------+-----------------
 Please add a torrc option that allows the user to specify the target or
 port range allowed for an application that creates an ephemeral hidden
 service.

 For example, saying that it can only bind to 12.0.0.1/32 and port range
 [8080-8090].

 The tor client should refuse creating the hidden service if the
 application tries values outside of that range, for example 127.0.0.1:22
 or 192.168.1.1:80

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18608>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online