[tor-bugs] #13904 [Stem]: Tests fail on Gentoo
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Dec 11 16:35:31 UTC 2014
#13904: Tests fail on Gentoo
------------------------+----------------------
Reporter: toralf | Owner: atagar
Type: defect | Status: reopened
Priority: normal | Milestone:
Component: Stem | Version:
Resolution: | Keywords: testing
Actual Points: | Parent ID:
Points: |
------------------------+----------------------
Comment (by atagar):
> yeah - good progress, no I just got this
Oops! Mistake on my part - fixed. Does it now work?
> It is the hardened kernel here (grsecurity in this case), which
restricts capabilities (I'm convinced, it makes sense to run a hardened
kernel, especially if somebody runs a tor relay)
I'd argue it's a bug with grsecurity. If a process lacks read permissions
for a resource then it should reflect that in the filesystem permissions.
Grsecurity looks to be lying to processes by saying 'You totally have read
access for the proc resources! But... you can't read the proc resources.'
This is my first time running into grsecurity which is why it's conflating
with Gentoo for me. On reflection these 'is_gentoo()' checks should really
be 'is_grsecurity()' - is there an easy method for detecting it?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13904#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list