diff options
| author | Cristian Toader <cristian.matei.toader@gmail.com> | 2013-08-14 23:03:38 +0300 |
|---|---|---|
| committer | Cristian Toader <cristian.matei.toader@gmail.com> | 2013-08-14 23:03:38 +0300 |
| commit | e2a7b484f47b242eb8399751cb0fbe73e14ef0b8 (patch) | |
| tree | 271e3dcbabf5c0c9c97fd13a157de104736e1a6a /src/or/main.c | |
| parent | 8a85a48b9d0ed2b298bcc26dfeb96fa7e31c05c4 (diff) | |
| download | tor-e2a7b484f47b242eb8399751cb0fbe73e14ef0b8.tar.gz tor-e2a7b484f47b242eb8399751cb0fbe73e14ef0b8.zip | |
partial libevent open fix
Diffstat (limited to 'src/or/main.c')
| -rw-r--r-- | src/or/main.c | 14 |
1 files changed, 9 insertions, 5 deletions
diff --git a/src/or/main.c b/src/or/main.c index a2fbe5f636..9d0719c464 100644 --- a/src/or/main.c +++ b/src/or/main.c @@ -2647,7 +2647,7 @@ sandbox_init_filter() sandbox_cfg_allow_openat_filename(&cfg, get_datadir_fname("cached-status"), 1); - sandbox_cfg_allow_open_filename_array(&cfg, 22, + sandbox_cfg_allow_open_filename_array(&cfg, 23, get_datadir_fname("cached-certs"), 1, get_datadir_fname("cached-certs.tmp"), 1, get_datadir_fname("cached-consensus"), 1, @@ -2669,7 +2669,8 @@ sandbox_init_filter() get_datadir_fname("unparseable-desc.tmp"), 1, get_datadir_fname("unparseable-desc"), 1, "/dev/srandom", 0, - "/dev/urandom", 0 + "/dev/urandom", 0, + "/dev/random", 0 ); sandbox_cfg_allow_stat64_filename_array(&cfg, 5, @@ -2682,7 +2683,7 @@ sandbox_init_filter() // orport if (server_mode(get_options())) { - sandbox_cfg_allow_open_filename_array(&cfg, 13, + sandbox_cfg_allow_open_filename_array(&cfg, 12, get_datadir_fname2("keys", "secret_id_key"), 1, get_datadir_fname2("keys", "secret_onion_key"), 1, get_datadir_fname2("keys", "secret_onion_key_ntor"), 1, @@ -2694,8 +2695,7 @@ sandbox_init_filter() get_datadir_fname("fingerprint"), 1, get_datadir_fname("cached-consensus"), 1, get_datadir_fname("cached-consensus.tmp"), 1, - "/etc/resolv.conf", 0, - "/dev/random", 0 + "/etc/resolv.conf", 0 ); sandbox_cfg_allow_stat64_filename_array(&cfg, 2, @@ -2783,6 +2783,10 @@ tor_main(int argc, char *argv[]) log_err(LD_BUG,"Failed to create syscall sandbox filter"); return -1; } + + // registering libevent rng + evutil_secure_rng_set_urandom_device_file( + (char*) sandbox_intern_string("/dev/random")); } switch (get_options()->command) { |