[tor-bugs] #16106 [Tor]: Sandbox causes crash when creating a hidden service through the control port

[Tor Bug Tracker & Wiki]

#16106: Sandbox causes crash when creating a hidden service through the control
port
--------------------------+--------------------------------
     Reporter:  micahlee  |      Owner:
         Type:  defect    |     Status:  new
     Priority:  normal    |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor       |    Version:  Tor: 0.2.5.12
   Resolution:            |   Keywords:  TorCore201508
Actual Points:            |  Parent ID:
       Points:            |
--------------------------+--------------------------------

Comment (by arma):

 Ok, so onionshare is broken with the Tor in debian now, since the debian
 Tor enables Sandbox 1; and onionshare can't use addonion yet because Tor
 Browser users don't have 0.2.7.x yet? That combination is sad.

 That said, I'm confused -- can't onionshare check the Tor version and use
 addonion if available, else if the version is too old, and getconf sandbox
 says it's on, then abort rather than setconfing a hidden service that will
 trigger a sandbox violation?

 All of this said, in parallel, maybe the Tor deb should have a canonical
 location that its sandbox rules allow it to write to, which the user can
 read, and then onionshare can just use a directory in this canonical
 allowed location?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16106#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online