[tor-bugs] #27334 [Core Tor/Tor]: RelaxDirModeCheck on ControlSocket still requires group to m

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Aug 27 07:08:33 UTC 2018


#27334: RelaxDirModeCheck on ControlSocket still requires group to m
--------------------------+-------------------------
 Reporter:  a_p           |          Owner:  (none)
     Type:  defect        |         Status:  closed
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:  wontfix
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+-------------------------

Comment (by a_p):

 Isn't that the point of RelaxDirModeCheck to give operators the freedom to
 allow a group to access the control socket files (of all instances)?

 Allowing admins to have the folder group-read and group-writable but
 forcing a specific group makes it
 hard to authorize a single group to access the sockets of all instances if
 every instance runs under a unique user/group.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27334#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list