mirrors/arti.git/crates/arti/src/process.rs, branch arti-v1.1.2 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.2 2023-01-30T18:52:32Z Use ErrorReport/Report for errors in warn! in arti 2023-01-30T18:52:32Z Ian Jackson ijackson@chiark.greenend.org.uk 2023-01-30T18:10:00Z urn:sha1:36ebf7d23adcf727972abd97d0a768be86c0e5a5 remove manual limitation of coredump size 2022-10-05T16:32:16Z trinity-1686a trinity@deuxfleurs.fr 2022-10-05T16:30:34Z urn:sha1:f230cb5c03b6be64c2cc12ae22bd448885b4a9e0 it's already disabled by secmem_proc fix compilation error with async-std 2022-09-06T19:32:20Z trinity-1686a trinity@deuxfleurs.fr 2022-09-06T19:32:20Z urn:sha1:4c543b570a49f88b49f51e47894afcf2d620ee2a Add functionality to listen for SIGHUPs. 2022-08-26T19:33:56Z Nick Mathewson nickm@torproject.org 2022-08-25T12:34:41Z urn:sha1:2c4a176e664f33537b7dea35051da3dacf81e991 arti: Do not allow running as root. 2022-08-24T14:57:03Z Nick Mathewson nickm@torproject.org 2022-08-23T19:59:04Z urn:sha1:25c287636bdc6edb89c741da4121668517ef6f0c This can be overridden with `application.allow_running_as_root`. Part of #523. arti: Add support for process hardening 2022-08-15T16:59:56Z Nick Mathewson nickm@torproject.org 2022-08-08T16:28:52Z urn:sha1:3c1bfb4916d4bfc929e7d6c4087054b480d5433e This is a compile-time feature with an associated configuration flag, both enabled by default. When it's turned on, hardening prevents the arti process from dumping core or being attached to by low-privileged processes. (This is a defense-in-depth measure, not an absolute way to prevent attacks. For more information, see [`secmem_proc`](https://docs.rs/secmem-proc/0.1.1/secmem_proc/).) Closes #364. arti: Move most public APIs behind `experimental-api`. 2022-08-11T19:35:32Z Nick Mathewson nickm@torproject.org 2022-08-08T14:14:30Z urn:sha1:f548a6ac55b5f1feb92ea4ffe5c4882a2e19a739 The remaining unconditionally public APIs are those related to our configuration objects, and the main_main() API. The rationale for making main_main() public is to have an actual entry point. The rationale for making the config APIs public is: 1. We really do intend for others to be able to read our configuration files using this API. 2. The structure of our configuration files is already part of our interface. Closes #530. Move SystemConfig to arti::cfg 2022-03-21T15:54:11Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-03-21T13:27:55Z urn:sha1:1c213d4d898142adade26f93968082653072f8ae Fixes #314, #418. arti: Make main module entrypoints pub 2022-03-11T18:28:15Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-03-11T16:34:02Z urn:sha1:32fe5cdd5ba1c7b753d4a3a672de482459db3dd9 This does not constitute any kind of stable API promise. But it might allow people to use our arti client code in novel ways. Upgrade dependency to new version of rlimit. 2022-02-25T13:45:24Z Nick Mathewson nickm@torproject.org 2022-02-25T13:45:24Z urn:sha1:c627f5054422bc804b22c25a235df2213578e4fb