[tor-bugs] #6937 [Tor Client]: SocksPipe or SocksSocket - an anonymous pipe to smoke network leakings bug out (of)

[Tor Bug Tracker & Wiki]

#6937: SocksPipe or SocksSocket - an anonymous pipe to smoke network leakings bug
out (of)
-------------------------------------+--------------------------------------
 Reporter:  ioerror                  |          Owner:                    
     Type:  enhancement              |         Status:  new               
 Priority:  normal                   |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor Client               |        Version:  Tor: unspecified  
 Keywords:  security needs-proposal  |         Parent:                    
   Points:                           |   Actualpoints:                    
-------------------------------------+--------------------------------------

Comment(by ioerror):

 If we use Unix Sockets, we can probably use setsocketopt() with
 SO_PASSCRED to ensure that only authorized clients use the SocksSocket.

 I agree with nick that this likely needs a proposal but I also think first
 I'm going to research it a bit more. The two different ways to implement
 such a feature have very different semantic security realities.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6937#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online