[tor-bugs] #33346 [Core Tor/Tor]: Seccomp soft fail (no write) in 0.4.2.6

[Tor Bug Tracker & Wiki]

#33346: Seccomp soft fail (no write) in 0.4.2.6
-------------------------------------------------+-------------------------
 Reporter:  subjectfrosting                      |          Owner:  nickm
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.4.4.x-final
Component:  Core Tor/Tor                         |        Version:  0.4.2.6
 Severity:  Normal                               |     Resolution:
 Keywords:  easy? 035-backport 041-backport      |  Actual Points:  .1
  042-backport 043-backport                      |
Parent ID:                                       |         Points:  .1
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by subjectfrosting):

 Hi nickm, thanks for the response!

 Good news: the crash is fixed.

 Bad news: other issues came up: Tor can't write to its data directory
 /var/lib/tor/data.
 Runs fine still with Sandbox 0.

 Let me know if I need to do more experimentation :)


 Tor log:
 {{{
 Tor[4561]: Parsing GEOIP IPv4 file /usr/share/tor/geoip.
 Tor[4561]: Parsing GEOIP IPv6 file /usr/share/tor/geoip6.
 Tor[4561]: Bootstrapped 0% (starting): Starting
 Tor[4561]: Could not open "/var/lib/tor/data/cached-certs": Operation not
 permitted
 Tor[4561]: Could not open "/var/lib/tor/data/cached-consensus" for mmap():
 Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/unverified-consensus" for
 mmap(): Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/cached-microdesc-consensus"
 for mmap(): Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/unverified-microdesc-
 consensus" for mmap(): Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/cached-microdescs" for
 mmap(): Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/cached-microdescs.new":
 Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/cached-descriptors" for
 mmap(): Operation not permitted
 Tor[4561]: Could not open "/var/lib/tor/data/cached-extrainfo" for mmap():
 Operation not permitted
 Tor[4561]: Starting with guard context "default"
 Tor[4561]: Couldn't open "/var/lib/tor/data/state.tmp"
 (/var/lib/tor/data/state) for writing: Operation not permitted
 Tor[4561]: Unable to write state to file "/var/lib/tor/data/state"; will
 try again later
 Tor[4561]: Bootstrapped 5% (conn): Connecting to a relay
 Tor[4561]: Bootstrapped 10% (conn_done): Connected to a relay
 Tor[4561]: Bootstrapped 14% (handshake): Handshaking with a relay
 Tor[4561]: Bootstrapped 15% (handshake_done): Handshake with a relay done
 Tor[4561]: Bootstrapped 20% (onehop_create): Establishing an encrypted
 directory connection
 Tor[4561]: Bootstrapped 25% (requesting_status): Asking for networkstatus
 consensus
 Tor[4561]: Bootstrapped 30% (loading_status): Loading networkstatus
 consensus
 Tor[4561]: Couldn't open "/var/lib/tor/data/unverified-microdesc-
 consensus.tmp" (/var/lib/tor/data/unverified-microdesc-consensus) for
 writing: Operation not permitted
 Tor[4561]: I learned some more directory information, but not enough to
 build a circuit: We have no usable consensus.
 Tor[4561]: Bootstrapped 40% (loading_keys): Loading authority key certs
 Tor[4561]: Couldn't open "/var/lib/tor/data/cached-certs.tmp"
 (/var/lib/tor/data/cached-certs) for writing: Operation not permitted
 Tor[4561]: Error writing certificates to disk.
 Tor[4561]: Could not open "/var/lib/tor/data/unverified-microdesc-
 consensus" for mmap(): Operation not permitted
 Tor[4561]: I learned some more directory information, but not enough to
 build a circuit: We have no usable consensus.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33346#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online