[tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

[Tor Bug Tracker & Wiki]

#22976: disallow tor exec'ing
--------------------------------------+------------------------------------
 Reporter:  dawuud                    |          Owner:  nickm
     Type:  defect                    |         Status:  merge_ready
 Priority:  Medium                    |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor              |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  sandbox, review-group-22  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+------------------------------------
Changes (by dgoulet):

 * status:  needs_review => merge_ready


Comment:

 >  This isn't fundamentally about seccomp; it's about disabling
 functionality. Our sandbox already disables all exec calls.

 Not sure it does... All the exeve() calls are disabled by `#if 0`.

 The changes file has this weird sentence:

 {{{
     - Added a new NoExec option to . When this option is set to 1,
 }}}

 Apart from that, lgtm;

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22976#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online