mirrors/arti.git/crates/arti/src/arti-example-config.toml, branch arti-v1.0.0 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.0.0 2022-08-25T17:41:28Z arti: cfg: Rename `*_port` to `*_listen` and change the type 2022-08-25T17:41:28Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-08-24T11:46:19Z urn:sha1:12476bf0d40ad24ccc8a6b9a41f183c2720caa90 This commit largely follows the example for resolve_alternative_specs. The difference is that there are two fields, so we use a macro to avoid recapitulating the field names. arti: Raise the default console log severity to "info" 2022-08-25T13:10:42Z Nick Mathewson nickm@torproject.org 2022-08-25T13:10:42Z urn:sha1:8fa1568b02a3cd4101f65b0e224151cb9813d0bc Previously we logged at "debug", but that's not meant to user-facing. arti: Do not allow running as root. 2022-08-24T14:57:03Z Nick Mathewson nickm@torproject.org 2022-08-23T19:59:04Z urn:sha1:25c287636bdc6edb89c741da4121668517ef6f0c This can be overridden with `application.allow_running_as_root`. Part of #523. channel: Introduce padding config 2022-08-16T17:39:57Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-07-26T16:12:55Z urn:sha1:498d39626f37f5eb375ee127e4e46d3c5e3cd0c1 Nothing actually reads this yet, and we also want a client-global default for padding. Introduce ChannelConfig 2022-08-16T17:39:57Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-07-27T19:34:43Z urn:sha1:76a1c45202cf35588780112d8400d50bd08f9926 This commit is just the necessary plumbing. The config is currently empty. We'll add something to it, for padding control, later. arti: Add support for process hardening 2022-08-15T16:59:56Z Nick Mathewson nickm@torproject.org 2022-08-08T16:28:52Z urn:sha1:3c1bfb4916d4bfc929e7d6c4087054b480d5433e This is a compile-time feature with an associated configuration flag, both enabled by default. When it's turned on, hardening prevents the arti process from dumping core or being attached to by low-privileged processes. (This is a defense-in-depth measure, not an absolute way to prevent attacks. For more information, see [`secmem_proc`](https://docs.rs/secmem-proc/0.1.1/secmem_proc/).) Closes #364. Rename download_tolerance to directory_tolerance 2022-07-22T14:14:36Z Nick Mathewson nickm@torproject.org 2022-07-22T14:14:36Z urn:sha1:3066aeff181b12de1e1f5b1fab27c67d730dbb69 Closes #503. Add a configuration option for reachable_addrs 2022-06-17T12:47:57Z Nick Mathewson nickm@torproject.org 2022-06-09T21:22:37Z urn:sha1:1c5f540dc87d30b73574f4e5429665c6d9d72077 (This doesn't do anything yet.) mistrust: Canonicalise prefix from Some("") to None 2022-05-30T15:00:45Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-05-27T16:10:40Z urn:sha1:0a324f843fdeadffa7f9fab381b4911563b2d8af This allows us to add the proper default example to the arti example config file. arti: config: Canonicalise ports, and provide example dns_port 2022-05-30T15:00:45Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-05-27T12:06:53Z urn:sha1:ca60859dffc3c809ecf5e75d5fca17f36b75c0d8 Now the validated configuration will never be `Some(0)`, even if that is what was written in the config file. The arti CLI parser can still produce this, so we don't touch the code that actually uses this. (Without the canonicalisation the default builder produces `None` for the `dns_port`, but the example would produce `Some(0)`, which is semantically identical but fails the test.) See https://gitlab.torproject.org/tpo/core/arti/-/issues/488 for some background.