Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.4.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-
Changes (by asn):

 * milestone:  Tor: 0.3.3.x-final => Tor: 0.3.4.x-final


Comment:

 Triaging this out of 033 due to above discussion. Please revert if not
 right.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by ahf):

 OK with me.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by nickm):

 Hmm.  I am thinking about deferring this to 0.3.4, since it is apparently
 not _our_ regression, and since it's probably going to take a bunch of
 fiddly cross-platform testing.

 Any objections?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by ahf):

 The glibc implementation of the `rename()` wrapper is:

 {{{
 /* Rename the file OLD to NEW.  */
 int
 rename (const char *old, const char *new)
 {
 #if defined (__NR_rename)
   return INLINE_SYSCALL_CALL (rename, old, new);
 #elif defined (__NR_renameat)
   return INLINE_SYSCALL_CALL (renameat, AT_FDCWD, old, AT_FDCWD, new);
 #else
   return INLINE_SYSCALL_CALL (renameat2, AT_FDCWD, old, AT_FDCWD, new, 0);
 #endif
 }
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by ahf):

 The kernel version is:

 {{{
 Linux rpi3 4.15.0-2-arm64 #1 SMP Debian 4.15.11-1 (2018-03-20) aarch64
 GNU/Linux
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by nickm):

 ooh, ENOSYS.  That means that the syscall actually doesn't exist.  Huh!
 If we're not using syscall wrong, that means that the rename() syscall
 doesn't actually exist in this kernel, and renameat() is being used
 because it's the only choice.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-
Changes (by ahf):

 * status:  needs_review => needs_information


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by ahf):

 Running Tor in strace reveals:

 {{{
 syscall_0xd845(0xad185396, 0xad1853c8, 0x2f6800,
 0x80808000, 0x682f, 0x80afe8) = -1 (errno 38)
 write(1, 0xf33fd978, 117Apr 05 21:06:33.000 [warn] Error replacing
 "/home/ahf/.tor/unverified-microdesc-consensus": Function not implemented

 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by ahf):

 Got an arm64 machine up and running:

 For the patches to compile and build I had to cherry-pick
 15b41fa6ae6a1356d5453242ccb7d7d301dd5e67 from #24424

 When the patches is applied Tor no longer crashes with the sandbox error
 above, but things are a bit fishy:

 {{{
 $ ./src/or/tor Sandbox 1
 Apr 05 20:52:43.368 [notice] Tor 0.2.9.15-dev (git-30bad392315558e7)
 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0h and Zlib
 1.2.8.
 Apr 05 20:52:43.368 [notice] Tor can't help you if you use it wrong! Learn
 how to be safe at https://www.torproject.org/download/download#warning
 Apr 05 20:52:43.368 [notice] Configuration file "/usr/local/etc/tor/torrc"
 not present, using reasonable defaults.
 Apr 05 20:52:43.386 [notice] Opening Socks listener on 127.0.0.1:9050
 Apr 05 20:52:43.000 [notice] Bootstrapped 0%: Starting
 Apr 05 20:52:45.000 [warn] Error replacing "/home/ahf/.tor/cached-
 microdescs": Function not implemented
 Apr 05 20:52:45.000 [warn] Error rebuilding microdescriptor cache:
 Function not implemented
 Apr 05 20:52:45.000 [warn] Error replacing "/home/ahf/.tor/cached-
 microdescs": Function not implemented
 Apr 05 20:52:45.000 [warn] Error rebuilding microdescriptor cache:
 Function not implemented
 Apr 05 20:52:45.000 [notice] Bootstrapped 5%: Connecting to directory
 server
 Apr 05 20:52:45.000 [notice] Bootstrapped 10%: Finishing handshake with
 directory server
 Apr 05 20:52:45.000 [notice] Bootstrapped 15%: Establishing an encrypted
 directory connection
 Apr 05 20:52:45.000 [notice] Bootstrapped 20%: Asking for networkstatus
 consensus
 Apr 05 20:52:45.000 [notice] Bootstrapped 25%: Loading networkstatus
 consensus
 Apr 05 20:52:47.000 [warn] Error replacing "/home/ahf/.tor/unverified-
 microdesc-consensus": Function not implemented
 Apr 05 20:52:47.000 [notice] I learned some more directory information,
 but not enough to build a circuit: We have no usable consensus.
 Apr 05 20:52:47.000 [warn] Error replacing "/home/ahf/.tor/state":
 Function not implemented
 Apr 05 20:52:47.000 [warn] Unable to write state to file
 "/home/ahf/.tor/state"; will try again later
 Apr 05 20:52:47.000 [notice] Bootstrapped 40%: Loading authority key certs
 Apr 05 20:52:47.000 [warn] Error replacing "/home/ahf/.tor/cached-certs":
 Function not implemented
 Apr 05 20:52:47.000 [warn] Error writing certificates to disk.
 Apr 05 20:52:48.000 [warn] Failed to unlink /home/ahf/.tor/unverified-
 microdesc-consensus: No such file or directory
 Apr 05 20:52:48.000 [warn] Error replacing "/home/ahf/.tor/cached-
 microdesc-consensus": Function not implemented
 Apr 05 20:52:48.000 [notice] Bootstrapped 80%: Connecting to the Tor
 network
 Apr 05 20:52:48.000 [notice] Bootstrapped 85%: Finishing handshake with
 first hop
 Apr 05 20:52:48.000 [notice] Bootstrapped 90%: Establishing a Tor circuit
 Apr 05 20:52:49.000 [notice] Tor has successfully opened a circuit. Looks
 like client functionality is working.
 Apr 05 20:52:49.000 [notice] Bootstrapped 100%: Done
 ^CApr 05 20:52:52.000 [notice] Interrupt: exiting cleanly.
 Apr 05 20:52:52.000 [warn] Error replacing "/home/ahf/.tor/state":
 Function not implemented
 Apr 05 20:52:52.000 [warn] Unable to write state to file
 "/home/ahf/.tor/state"; will try again later
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  ahf  |Sponsor:
-+-

Comment (by ahf):

 Adding a note here for the `rename()` change in glibc:
 
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=7fe1e1d60a0f7;hp=2bf6e649d6db0c678b49b5d634022f60e6335b42

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by nickm):

 (If this doesn't fix it for you, weasel, could you post the exact
 orconfig.h file that configure generates on this platform, and the exact
 version of glibc that it uses?)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
-+-
 Reporter:  weasel   |  Owner:  nickm
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.3.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.2.5-alpha
 Severity:  Normal   | Resolution:
 Keywords:  033-must, crash, sandbox,|  Actual Points:
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by nickm):

 * status:  accepted => needs_review


Comment:

 My branch `bug24454_029` now has fixes for both parts of this issue, but I
 won't be sure it's actually fixed until we try building and running it on
 arm64.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
+
 Reporter:  weasel  |  Owner:  nickm
 Type:  defect  | Status:  accepted
 Priority:  Medium  |  Milestone:  Tor: 0.3.3.x-final
Component:  Core Tor/Tor|Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal  | Resolution:
 Keywords:  033-must crash sandbox  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+

Comment (by nickm):

 So, we can allow unlinkat and newfstatat and ppoll without additional
 trouble.  And I *hope* that the #24315 change will resolve the openat
 issue.

 I have a branch `bug24454_029`, incorporating my patch for #25313, that
 allows these syscalls.

 The renameat() issue is trickier, and might require that we reproduce some
 of the logic behind the openat() changes in #24315.  Tell me, do you know
 what options the renameat() code in libc is using?  Is it always passing
 `AT_FDCWD` like the openat() code uses, or is it doing something more
 complicated?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
+
 Reporter:  weasel  |  Owner:  nickm
 Type:  defect  | Status:  accepted
 Priority:  Medium  |  Milestone:  Tor: 0.3.3.x-final
Component:  Core Tor/Tor|Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal  | Resolution:
 Keywords:  033-must crash sandbox  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+
Changes (by nickm):

 * keywords:  033-must => 033-must crash sandbox


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
--+
 Reporter:  weasel|  Owner:  nickm
 Type:  defect| Status:  accepted
 Priority:  Medium|  Milestone:  Tor: 0.3.3.x-final
Component:  Core Tor/Tor  |Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal| Resolution:
 Keywords:  033-must  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by bundesgebaermutter):

 Will this also work on 32-bit ARM?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
--+
 Reporter:  weasel|  Owner:  nickm
 Type:  defect| Status:  accepted
 Priority:  Medium|  Milestone:  Tor: 0.3.3.x-final
Component:  Core Tor/Tor  |Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by nickm):

 * milestone:  Tor: 0.3.2.x-final => Tor: 0.3.3.x-final


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
--+
 Reporter:  weasel|  Owner:  nickm
 Type:  defect| Status:  accepted
 Priority:  Medium|  Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor  |Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by nickm):

 * status:  new => accepted
 * owner:  (none) => nickm


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
--+
 Reporter:  weasel|  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor  |Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by catalyst):

 * milestone:   => Tor: 0.3.2.x-final


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24454 [Core Tor/Tor]: sandbox failure on arm64

[Tor Bug Tracker & Wiki]

#24454: sandbox failure on arm64
--+
 Reporter:  weasel|  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Core Tor/Tor  |Version:  Tor: 0.3.2.5-alpha
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by weasel):

 With this, it finally bootstraps.

 {{{
 --- /home/weasel/sandbox.c  2017-11-28 08:24:23.807897308 +
 +++ src/common/sandbox.c2017-11-28 08:40:18.205657824 +
 @@ -258,7 +258,12 @@
  SCMP_SYS(recvmsg),
  SCMP_SYS(recvfrom),
  SCMP_SYS(sendto),
 -SCMP_SYS(unlink)
 +SCMP_SYS(unlink),
 +SCMP_SYS(unlinkat),
 +SCMP_SYS(newfstatat),
 +SCMP_SYS(openat),
 +SCMP_SYS(ppoll),
 +SCMP_SYS(renameat)
  };

  /* These macros help avoid the error where the number of filters we add
 on a
 }}}

 Note that I don't think this patch should be applied as is.  (It allows
 openat unrestricted for instance.)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs