[tor-bugs] #23631 [Applications/Tor Browser]: Improve sudo need

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Sep 24 17:05:09 UTC 2017

#23631: Improve sudo need
     Reporter:  tom                       |      Owner:  tbb-team
         Type:  enhancement               |     Status:  new
     Priority:  Low                       |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
 Right now the Tor Browser build takes a long time, and sudo is needed
 periodically throughout it. This means you have to either run it as root,
 babysit it, or set your user account up with passwordless sudo. All of
 those kinda stink.

 It's be cool if we could improve that a bit.  Ideas:

 - Write a setuid program that execs the necessary commands but provides
 input and directory filtering (directory path either compiled in or read
 from a root-owned file I guess)
 - Same idea but instead of setuid, it's set up to be run with passwordless
 - Somehow request sudo access in the beginning and retain it through the
 whole script (without running everything as root)

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23631>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tor-bugs mailing list