[tor-bugs] #32827 [Internal Services/Services Admin Team]: archive.tpo's rsync logs ip addresses (and it shouldn't)

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 20 20:16:15 UTC 2020


#32827: archive.tpo's rsync logs ip addresses (and it shouldn't)
-------------------------------------------------+-------------------------
 Reporter:  arma                                 |          Owner:  anarcat
     Type:  defect                               |         Status:
                                                 |  assigned
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Services Admin     |        Version:
  Team                                           |
 Severity:  Normal                               |     Resolution:
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by anarcat):

 > this probably affects other components, as I just reused existing code
 when i set that up. we also need to track that.

 at first glance, that's the only server which has that problem.

 i've censored the IP addresses from the rsync access log in a5726714, but
 we have another problem: rsync is started by systemd socket activation,
 which happily spills those IP addresses all over itself:

 {{{
 Jan 20 20:09:45 archive-01/archive-01 systemd[1]: Started rsync daemon
 archive (10.0.0.1:35380).
 Jan 20 20:09:45 archive-01/archive-01 systemd[1]: rsyncd-
 archive at 76504-159.69.63.226:873-10.0.0.1:35380.service: Succeeded.
 }}}

 In that context, `10.0.0.1` is my IP address, which I censored in this
 copy-paste.

 so this is only partly fixed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32827#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list