summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Goulet <dgoulet@torproject.org>2023-01-10 11:15:36 -0500
committerDavid Goulet <dgoulet@torproject.org>2023-01-10 11:15:36 -0500
commit80748f41affa79588b7d1ada04de7cefde0d24e5 (patch)
tree61027430caf636a4823c146037eef70c23ab14c0
parent695066856c8122d58b22d0327add0029029588cb (diff)
parent35e221688b2636c405332bc6140d6e5cc483b0bf (diff)
downloadtor-80748f41affa79588b7d1ada04de7cefde0d24e5.tar.gz
tor-80748f41affa79588b7d1ada04de7cefde0d24e5.zip
Merge branch 'maint-0.4.7' into release-0.4.7
-rw-r--r--changes/ticket407293
-rw-r--r--src/app/main/main.c9
2 files changed, 10 insertions, 2 deletions
diff --git a/changes/ticket40729 b/changes/ticket40729
new file mode 100644
index 0000000000..1c2d43d14f
--- /dev/null
+++ b/changes/ticket40729
@@ -0,0 +1,3 @@
+ o Minor bugfixes (sandbox, authority):
+ - With the sandbox enabled, allow to write "my-consensus-{ns|microdesc}" and
+ to rename them as well. Fixes bug 40729; bugfix on 0.3.5.1-alpha.
diff --git a/src/app/main/main.c b/src/app/main/main.c
index 7fb92c59db..838e129d04 100644
--- a/src/app/main/main.c
+++ b/src/app/main/main.c
@@ -924,8 +924,8 @@ sandbox_init_filter(void)
if (authdir_mode(options)) {
OPEN_DATADIR("approved-routers");
- OPEN_CACHEDIR_SUFFIX("my-consensus-microdesc", ".tmp");
- OPEN_CACHEDIR_SUFFIX("my-consensus-ns", ".tmp");
+ OPEN_DATADIR_SUFFIX("my-consensus-microdesc", ".tmp");
+ OPEN_DATADIR_SUFFIX("my-consensus-ns", ".tmp");
}
if (options->ServerDNSResolvConfFile)
@@ -1004,6 +1004,11 @@ sandbox_init_filter(void)
if (options->BridgeAuthoritativeDir)
RENAME_SUFFIX("networkstatus-bridges", ".tmp");
+ if (authdir_mode(options)) {
+ RENAME_SUFFIX("my-consensus-microdesc", ".tmp");
+ RENAME_SUFFIX("my-consensus-ns", ".tmp");
+ }
+
#define STAT_DATADIR(name) \
sandbox_cfg_allow_stat_filename(&cfg, get_datadir_fname(name))