mirrors/arti.git/crates/arti/src/process.rs, branch arti-v1.0.1 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.0.1 2022-09-06T19:32:20Z fix compilation error with async-std 2022-09-06T19:32:20Z trinity-1686a trinity@deuxfleurs.fr 2022-09-06T19:32:20Z urn:sha1:4c543b570a49f88b49f51e47894afcf2d620ee2a Add functionality to listen for SIGHUPs. 2022-08-26T19:33:56Z Nick Mathewson nickm@torproject.org 2022-08-25T12:34:41Z urn:sha1:2c4a176e664f33537b7dea35051da3dacf81e991 arti: Do not allow running as root. 2022-08-24T14:57:03Z Nick Mathewson nickm@torproject.org 2022-08-23T19:59:04Z urn:sha1:25c287636bdc6edb89c741da4121668517ef6f0c This can be overridden with `application.allow_running_as_root`. Part of #523. arti: Add support for process hardening 2022-08-15T16:59:56Z Nick Mathewson nickm@torproject.org 2022-08-08T16:28:52Z urn:sha1:3c1bfb4916d4bfc929e7d6c4087054b480d5433e This is a compile-time feature with an associated configuration flag, both enabled by default. When it's turned on, hardening prevents the arti process from dumping core or being attached to by low-privileged processes. (This is a defense-in-depth measure, not an absolute way to prevent attacks. For more information, see [`secmem_proc`](https://docs.rs/secmem-proc/0.1.1/secmem_proc/).) Closes #364. arti: Move most public APIs behind `experimental-api`. 2022-08-11T19:35:32Z Nick Mathewson nickm@torproject.org 2022-08-08T14:14:30Z urn:sha1:f548a6ac55b5f1feb92ea4ffe5c4882a2e19a739 The remaining unconditionally public APIs are those related to our configuration objects, and the main_main() API. The rationale for making main_main() public is to have an actual entry point. The rationale for making the config APIs public is: 1. We really do intend for others to be able to read our configuration files using this API. 2. The structure of our configuration files is already part of our interface. Closes #530. Move SystemConfig to arti::cfg 2022-03-21T15:54:11Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-03-21T13:27:55Z urn:sha1:1c213d4d898142adade26f93968082653072f8ae Fixes #314, #418. arti: Make main module entrypoints pub 2022-03-11T18:28:15Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-03-11T16:34:02Z urn:sha1:32fe5cdd5ba1c7b753d4a3a672de482459db3dd9 This does not constitute any kind of stable API promise. But it might allow people to use our arti client code in novel ways. Upgrade dependency to new version of rlimit. 2022-02-25T13:45:24Z Nick Mathewson nickm@torproject.org 2022-02-25T13:45:24Z urn:sha1:c627f5054422bc804b22c25a235df2213578e4fb Make max_file_limit configurable 2022-01-28T11:17:49Z Neel Chauhan neel@neelc.org 2022-01-28T11:17:49Z urn:sha1:417809123c7101de64aa8e1e27c3a76a862dec1d arti: On startup, increase the NOFILE resource limit. 2021-10-14T17:25:19Z Nick Mathewson nickm@torproject.org 2021-10-14T17:25:19Z urn:sha1:81a5675c1b46adf487c6b19c73018fab6953f295 The default soft limit is typically enough for process usage on most Unixes, but OSX has a pretty low default (256), which you can run into easily under heavy usage. With this patch, we're going to aim for as much as 16384, if we're allowed. Fixes part of #188.