diff options
author | Nick Mathewson <nickm@torproject.org> | 2014-05-22 19:56:56 -0400 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2014-05-22 19:56:56 -0400 |
commit | ffc1fde01fb4fc752aa54de0282cf027bdb738cf (patch) | |
tree | 3864849d8cab337f95824ee4b43492d6fc8c2f9c /src/or/main.c | |
parent | 1356ef1176099bf56d047fbdc817a99fc1ed76ea (diff) | |
download | tor-ffc1fde01fb4fc752aa54de0282cf027bdb738cf.tar.gz tor-ffc1fde01fb4fc752aa54de0282cf027bdb738cf.zip |
sandbox: allow access to cookie files, approved-routers
fixes part of 12064
Diffstat (limited to 'src/or/main.c')
-rw-r--r-- | src/or/main.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/src/or/main.c b/src/or/main.c index 8e241d407b..ba462dcc49 100644 --- a/src/or/main.c +++ b/src/or/main.c @@ -2838,6 +2838,16 @@ sandbox_init_filter(void) smartlist_free(logfiles); } + { + char *fname; + if ((fname = get_controller_cookie_file_name())) { + sandbox_cfg_allow_open_filename(&cfg, fname); + } + if ((fname = get_ext_or_auth_cookie_file_name())) { + sandbox_cfg_allow_open_filename(&cfg, fname); + } + } + // orport if (server_mode(get_options())) { sandbox_cfg_allow_open_filename_array(&cfg, @@ -2862,6 +2872,7 @@ sandbox_init_filter(void) get_datadir_fname2("stats", "buffer-stats.tmp"), get_datadir_fname2("stats", "conn-stats"), get_datadir_fname2("stats", "conn-stats.tmp"), + get_datadir_fname("approved-routers"), get_datadir_fname("fingerprint"), get_datadir_fname("fingerprint.tmp"), get_datadir_fname("hashed-fingerprint"), |