[tor-bugs] #32344 [Core Tor/Tor]: Make immutability into a config_var_t flag

[Tor Bug Tracker & Wiki]

#32344: Make immutability into a config_var_t flag
-------------------------------------------+-------------------------------
 Reporter:  nickm                          |          Owner:  nickm
     Type:  task                           |         Status:
                                           |  needs_revision
 Priority:  Medium                         |      Milestone:  Tor:
                                           |  0.4.3.x-final
Component:  Core Tor/Tor                   |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  network-team-roadmap-november  |  Actual Points:  .2
Parent ID:  #29211                         |         Points:
 Reviewer:  teor                           |        Sponsor:
-------------------------------------------+-------------------------------

Comment (by nickm):

 So to summarize the situation: I think that all files need to be sandbox-
 immutable.

 I think that we'll come up with the right solution there when we do a
 refactoring for the sandbox code; this could be well handled with
 something based on #32339, which already looks at nearly all of the files,
 and which needs to start looking at all of the rest too.  Currently my
 best guess is that constraints like this would want support for scanning
 ''all'' filename options, along with some way for reaching inside Log and
 so on.

 If it's all right with you, could we take some version of this branch
 ''without'' covering other mutability invariants?  I'd like to keep the
 scope small-ish here, to avoid delaying the key refactoring of #30866.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32344#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online