[tor-bugs] #34130 [Core Tor/Tor]: Tor won't start with seccomp sandbox when compiled with --enable-nss

[Tor Bug Tracker & Wiki]

#34130: Tor won't start with seccomp sandbox when compiled with --enable-nss
-------------------------------------------+-------------------------------
 Reporter:  Jigsaw52                       |          Owner:  (none)
     Type:  defect                         |         Status:  needs_review
 Priority:  Medium                         |      Milestone:  Tor:
                                           |  0.4.4.x-final
Component:  Core Tor/Tor                   |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  nss sandbox seccomp backport?  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:  nickm                          |        Sponsor:
-------------------------------------------+-------------------------------

Comment (by Jigsaw52):

 This bug exists since the --enable-nss flag was implemented in
 tor-0.3.5.1-alpha.
 I've updated the changes file.

 I can reproduce the problem on 0.3.5.1-alpha but this patch is not enough
 to fix it in that version, it crashes with a call to setsockopt. Some
 change in the sandbox rules for setsockopt or removal of code that called
 setsockopt must have happened between this version and the current master.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34130#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online