[tor-commits] [orbot/master] more updates to limit localhost port access

n8fr8 at torproject.org n8fr8 at torproject.org
Thu Jan 26 01:12:35 UTC 2012


commit 2b15ff66ecc2d528a546af266dffeb49404369aa
Author: Nathan Freitas <nathan at freitas.net>
Date:   Sun Jan 15 10:45:18 2012 -0500

    more updates to limit localhost port access
---
 .../torproject/android/service/TorTransProxy.java  |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/src/org/torproject/android/service/TorTransProxy.java b/src/org/torproject/android/service/TorTransProxy.java
index aed3a02..e5ba732 100644
--- a/src/org/torproject/android/service/TorTransProxy.java
+++ b/src/org/torproject/android/service/TorTransProxy.java
@@ -454,6 +454,8 @@ public class TorTransProxy implements TorServiceConstants {
 			script.append(ipTablesPath);
 			script.append(" -t filter");
 			script.append(" -A OUTPUT");
+			script.append(" -m owner ! --uid-owner ");
+			script.append(torUid);
 			script.append(" -p tcp");
 			script.append(" -d 127.0.0.1");
 			script.append(" --dport ");





More information about the tor-commits mailing list