diff options
| author | Nick Mathewson <nickm@torproject.org> | 2015-01-29 15:16:15 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2015-01-29 15:16:15 -0500 |
| commit | a87ea9b1c6a61acebc670f54a62e8c443329c34c (patch) | |
| tree | 22eb6cbc3f8fc34757f42afc60829364ff808751 /changes/bug12585 | |
| parent | f6afb04abbf46d04c718fa3506000f4fb41e2510 (diff) | |
| parent | 4c5133e42d731a79480b6d54fbe81f440a9f4429 (diff) | |
| download | tor-a87ea9b1c6a61acebc670f54a62e8c443329c34c.tar.gz tor-a87ea9b1c6a61acebc670f54a62e8c443329c34c.zip | |
Merge branch 'bug14451_026_v1'
Diffstat (limited to 'changes/bug12585')
| -rw-r--r-- | changes/bug12585 | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/changes/bug12585 b/changes/bug12585 index 495a2f0d71..ac03993916 100644 --- a/changes/bug12585 +++ b/changes/bug12585 @@ -1,9 +1,12 @@ o Major features (security) - - Implementation of SocksSocket option - SocksSocket implements a SOCKS + - Implementation of an AF_UNIX socket option to implement a SOCKS proxy reachable by Unix Domain Socket. This allows client applications to communicate with Tor without having the ability to create AF_INET or AF_INET6 family sockets. If an application has permission to create a socket with AF_UNIX, it may directly communicate with Tor as if it were an other SOCKS proxy. This should allow high risk applications to be entirely prevented from connecting directly with TCP/IP, they will be able to only connect to the - internet through AF_UNIX and only through Tor. Closes ticket 12585. + internet through AF_UNIX and only through Tor. + To create a socket of this type, use the syntax "unix:/path/to/socket". + Closes ticket 12585. + |