[tor-bugs] #10702 [arm]: arm tells users to "sudo -u debian-tor arm", which lets arm read tor's keys

[Tor Bug Tracker & Wiki]

#10702: arm tells users to "sudo -u debian-tor arm", which lets arm read tor's keys
------------------------+--------------------
     Reporter:  arma    |      Owner:  atagar
         Type:  defect  |     Status:  new
     Priority:  normal  |  Milestone:
    Component:  arm     |    Version:
   Resolution:          |   Keywords:
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------

Comment (by atagar):

 > (More generally, I think arm should ask Tor questions via the control
 protocol more, rather than bypassing Tor and trying to use the local
 system to discover Tor things itself.)

 In an ideal world yes, it would be nice if Tor provided controllers with
 this and other information. But it doesn't. Years ago you asked me to
 write proposals for things arm would like and I sunk quite a bit of time
 into that. Trouble is that proposals don't magically turn into code.
 Without somebody implementing these in Tor itself this is not really
 realistic. :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10702#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online