Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-09-25 | Bump to 0.2.7.3-rc-dev | Nick Mathewson | |
2015-09-24 | Increment version. | Nick Mathewson | |
2015-07-27 | Bump version to 0.2.7.2-alpha-dev | Nick Mathewson | |
2015-07-23 | Bump version (and explain how) | Nick Mathewson | |
2015-07-20 | Merge remote-tracking branch 'public/bug16162_026' | Nick Mathewson | |
2015-07-20 | Use a more recommended syntax for the systemd unit file | Nick Mathewson | |
closes 16162. | |||
2015-07-12 | Bump maint-0.2.6 to 0.2.6.10-dev | Nick Mathewson | |
2015-07-12 | Bump maint-0.2.6 to 0.2.6.10 | Nick Mathewson | |
2015-06-10 | Bump version to 0.2.6.9 | Andrea Shepard | |
2015-06-11 | Tweak clang sanitizer blacklist for out-of-tree builds, make, ccache | teor | |
Avoid using file names and file paths for compatibility with out-of-tree builds. Note make and ccache don't track blacklist dependencies, add workarounds. | |||
2015-06-06 | Edit contrib/README to document the contrib/clang directory | teor | |
2015-06-06 | Add instructions for clang sanitizers, static analyzer, and coverity | teor | |
Document use of coverity, clang static analyzer, and clang dynamic undefined behavior and address sanitizers in doc/HACKING. Add clang dynamic sanitizer blacklist in contrib/clang/sanitizer_blacklist.txt to exempt known undefined behavior. Include detailed usage instructions in this blacklist file. Patch by "teor". | |||
2015-05-21 | Revert the broken part of 548b4be | Nick Mathewson | |
Fixes 16152. | |||
2015-05-19 | Bump maint-0.2.6 to 0.2.6.8 | Nick Mathewson | |
2015-05-12 | Bump version to 0.2.7.1-alpha-dev | Nick Mathewson | |
2015-05-11 | Bump version to 0.2.7.1-alpha. (This is not the release yet.) | Nick Mathewson | |
2015-04-06 | bump version to 0.2.6.7-dev | Nick Mathewson | |
2015-04-06 | bump version to 0.2.6.7 | Nick Mathewson | |
2015-03-24 | bump to 0.2.6.6 | Nick Mathewson | |
2015-03-18 | bump to 0.2.6.5-rc.dev | Nick Mathewson | |
2015-03-18 | bump to 0.2.6.5-rc | Nick Mathewson | |
2015-03-17 | Forward-port changelog and releasenotes | Nick Mathewson | |
2015-03-12 | Added a comment to tor.service.in | Nick Mathewson | |
This explains that if you change your torrc to do more, you might need to change tor.service.in to allow it. See #15195. | |||
2015-03-10 | bump 0.2.6 to 0.2.6.4-rc-dev | Nick Mathewson | |
2015-02-24 | Bump master to 0.2.7tor-0.2.7.0-root | Nick Mathewson | |
2015-02-19 | bump version to 0.2.6.3-alpha-dev | Nick Mathewson | |
2015-02-19 | Increment version to 0.2.6.3-alpha | Nick Mathewson | |
2015-01-11 | Actually remove LOCALSTATEDIR@/run/tor line from tor.service.in | Nick Mathewson | |
2015-01-11 | systemd changes for 13805 as recommened by Tomasz on that ticket. | Nick Mathewson | |
2015-01-11 | Merge remote-tracking branch 'candrews/issue13805' | Nick Mathewson | |
2015-01-11 | fix and enable systemd watchdog | Tomasz Torcz | |
There were following problems: - configure.ac wrongly checked for defined HAVE_SYSTEMD; this wasn't working, so the watchdog code was not compiled in. Replace library search with explicit version check - sd_notify() watchdog call was unsetting NOTIFY_SOCKET from env; this means only first "watchdog ping" was delivered, each subsequent one did not have socket to be sent to and systemd was killing service - after those fixes, enable Watchdog in systemd unit with one minute intervals | |||
2015-01-11 | send PID of the main daemon to supervisor | Tomasz Torcz | |
If running under systemd, notify the supervisor about current PID of Tor daemon. This makes systemd unit simpler and more robust: it will do the right thing regardless of RunAsDaemon settings. | |||
2014-12-31 | Bump version to 0.2.6.2-alpha-dev | Nick Mathewson | |
2014-12-31 | bump the version to 0.2.6.2-alpha | Nick Mathewson | |
2014-11-28 | Add ProtectSystem = full | Craig Andrews | |
See 13805 | |||
2014-11-28 | Prefix ReadWriteDirectories with a "-" so if they don't exist it's not an error | Craig Andrews | |
See 13805 | |||
2014-11-28 | Use ProtectHome instead of InaccessibleDirectories | Craig Andrews | |
See 13805 | |||
2014-11-28 | Use PrivateDevices instead of DeviceAllow | Craig Andrews | |
See 13805 | |||
2014-10-30 | Bump version to 0.2.6.1-alpha-dev | Nick Mathewson | |
2014-10-30 | Bump version to 0.2.6.1-alpha | Nick Mathewson | |
2014-09-19 | systemd unit file: set up /var/run/tor as writable for the Tor service. | intrigeri | |
For some strange reason, this was not needed with systemd v208. But it's needed with systemd v215 on current Debian sid, and entirely makes sense. | |||
2014-09-03 | Merge remote-tracking branch 'intrigeri/bug12939-systemd-no-new-privileges' | Nick Mathewson | |
Conflicts: contrib/dist/tor.service.in | |||
2014-09-03 | Merge remote-tracking branch 'intrigeri/bug12751-systemd-filesystem-sandbox' | Nick Mathewson | |
2014-08-27 | systemd unit file: ensures that the process and all its children can never gain | intrigeri | |
new privileges (#12939). | |||
2014-08-27 | systemd unit file: only allow tor to write to /var/lib/tor and /var/log/tor ↵ | intrigeri | |
(#12751). The rest of the filesystem is accessible for reading only. Still, quoting systemd.exec(5): Note that restricting access with these options does not extend to submounts of a directory that are created later on. | |||
2014-07-30 | Merge remote-tracking branch 'origin/maint-0.2.5' | Nick Mathewson | |
2014-07-30 | Merge remote-tracking branch 'intrigeri/bug12731-systemd-no-run-as-daemon' ↵ | Nick Mathewson | |
into maint-0.2.5 Conflicts: contrib/dist/tor.service.in | |||
2014-07-30 | Merge remote-tracking branch 'intrigeri/bug12730-systemd-verify-config' into ↵ | Nick Mathewson | |
maint-0.2.5 | |||
2014-07-30 | Verify configuration file via ExecStartPre in the systemd unit file (#12730). | intrigeri | |
2014-07-30 | Explicitly disable RunAsDaemon in the systemd unit file (#12731). | intrigeri | |
Our current systemd unit uses "Type = simple", so systemd does not expect tor to fork. If the user has "RunAsDaemon 1" in their torrc, then things won't work as expected. This is e.g. the case on Debian (and derivatives), since there we pass "--defaults-torrc /usr/share/tor/tor-service-defaults-torrc" (that contains "RunAsDaemon 1") by default. The only solution I could find is to explicitly pass "--RunAsDaemon 0" when starting tor from the systemd unit file, which this commit does. |