[tor-bugs] #6881 [arm]: cannot connect to tor socket

[Tor Bug Tracker & Wiki]

#6881: cannot connect to tor socket
-----------------------------+----------------------------------------------
 Reporter:  btb@…            |          Owner:  atagar  
     Type:  defect           |         Status:  assigned
 Priority:  normal           |      Milestone:          
Component:  arm              |        Version:          
 Keywords:                   |         Parent:          
   Points:                   |   Actualpoints:          
-----------------------------+----------------------------------------------
Changes (by atagar):

  * status:  new => assigned


Comment:

 Found the issue. The helper method for connecting to a socket does not
 accept a passphrase (arm only uses a passphrase if you're using a port
 based connection):
 https://gitweb.torproject.org/arm.git/blob/HEAD:/src/util/torTools.py#l116

 Using a control socket is equivalent to having an authentication cookie
 (both rely on file permissions for protecting unauthorized connections).
 That's why I didn't account for passwords with sockets. Definitely a bug,
 though it should be fine for you to drop password auth until we make a fix
 (unless your socket has wide open permissions, of course - that would be
 bad).

 Stem does not have this issue, so this will be addressed when we migrate
 arm over (which should be relatively soon-ish)...
 https://gitweb.torproject.org/stem.git/blob/HEAD:/stem/connection.py#l130

 Thanks for the catch!

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6881#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online