[tor-bugs] #32344 [Core Tor/Tor]: Make immutability into a config_var_t flag

[Tor Bug Tracker & Wiki]

#32344: Make immutability into a config_var_t flag
-------------------------------------------+-------------------------------
 Reporter:  nickm                          |          Owner:  nickm
     Type:  task                           |         Status:
                                           |  needs_revision
 Priority:  Medium                         |      Milestone:  Tor:
                                           |  0.4.3.x-final
Component:  Core Tor/Tor                   |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  network-team-roadmap-november  |  Actual Points:  .2
Parent ID:  #29211                         |         Points:
 Reviewer:  teor                           |        Sponsor:
-------------------------------------------+-------------------------------
Changes (by teor):

 * status:  needs_review => needs_revision


Comment:

 Looks fine, but I don't know why some files are immutable, others are
 sandbox-immutable, and others can be changed at any time.

 0. Should we have a flag for sandbox-immutable? (A sandbox-immutable flag
 would significantly simplify my relay refactor in #32213.)
 1. Should all files be sandbox-immutable?
 2. Should we also make HiddenServiceDir (sandbox-)immutable?
 3. Should we also make Logs (sandbox-)immutable?
 4. Should we be checking changes to options that require access to extra
 files, like onion authentication?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32344#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online