Unix group membership / permissions on control cookie can cause a panic #87

New Issue

GBHC · 2018-07-03T14:58:29Z

GBHC commented

2018-07-03 14:58:29 +00:00

OS: Fedora

torrc
ControlPort 9051
ControlSocket /run/tor/control
ControlSocketsGroupWritable 1
CookieAuthentication 1
CookieAuthFile /run/tor/control.authcookie
CookieAuthFileGroupReadable 1

Unix User groups;
docker, USERNAME

ls -l /run/
drwxr-x---. 2 toranon toranon 100 Jul 3 15:08 tor

Panic
cwtch [test]> new-profile test /tmp/test.profile
** WARNING: PASSWORDS CANNOT BE RECOVERED! **
Enter a password to encrypt the profile:
Re-enter password:
New profile created for test
panic: failed to read COOKIEFILE: open /run/tor/control.authcookie: permission denied

goroutine 15 [running]:
log.Panic(0xc420223fb8, 0x1, 0x1)
	/usr/lib/golang/src/log/log.go:322 +0xc0
cwtch.im/cwtch/app.(*Application).NewProfile.func1(0x9c29a0)
/home/REDACT/sourcecode/GoWorkDir/src/cwtch.im/cwtch    /app/app.go:29 +0x8b
created by cwtch.im/cwtch/app.(*Application).NewProfile
/home/REDACT/sourcecode/GoWorkDir/src/cwtch.im/cwtch/app/app.go:31 +0x123
exit status 2

User resolution:

Afer sudo usermod -G toranon all works as expected

**OS:** Fedora **torrc** ControlPort 9051 ControlSocket /run/tor/control ControlSocketsGroupWritable 1 CookieAuthentication 1 CookieAuthFile /run/tor/control.authcookie CookieAuthFileGroupReadable 1 **Unix User groups;** docker, USERNAME **ls -l /run/** drwxr-x---. 2 toranon toranon 100 Jul 3 15:08 tor **Panic** cwtch [test]> new-profile test /tmp/test.profile ** WARNING: PASSWORDS CANNOT BE RECOVERED! ** Enter a password to encrypt the profile: Re-enter password: New profile created for test panic: failed to read COOKIEFILE: open /run/tor/control.authcookie: permission denied goroutine 15 [running]: log.Panic(0xc420223fb8, 0x1, 0x1) /usr/lib/golang/src/log/log.go:322 +0xc0 cwtch.im/cwtch/app.(*Application).NewProfile.func1(0x9c29a0) /home/REDACT/sourcecode/GoWorkDir/src/cwtch.im/cwtch /app/app.go:29 +0x8b created by cwtch.im/cwtch/app.(*Application).NewProfile /home/REDACT/sourcecode/GoWorkDir/src/cwtch.im/cwtch/app/app.go:31 +0x123 exit status 2 **User resolution:** Afer `sudo usermod -G toranon` all works as expected

dan commented

2018-11-21 22:42:58 +00:00

we don't quite have proscribed run instructions for all users.
I think the new bine/tormanager patch cleans this up a little tho
also containers for the server

we don't quite have proscribed run instructions for all users. I think the new bine/tormanager patch cleans this up a little tho also containers for the server

dan closed this issue

2018-11-21 22:42:58 +00:00

Sign in to join this conversation.