mirrors/arti.git/crates/fs-mistrust/src/lib.rs, branch arti-v0.3.0 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v0.3.0 2022-05-03T14:03:32Z fs-mistrust: write a lot about TOCTOU issues. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-03T13:56:23Z urn:sha1:f35b4881295f52c252236b151764e82dbcb3b332 fs-mistrust: Rename SecureDir to CheckedDir. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-03T13:00:50Z urn:sha1:2f467245ca6925f8573ab2d4aadb1f9c874352f4 fs-mistrust: Add a dangerously_trust_everyone method. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-02T15:35:15Z urn:sha1:2087dde3a07a8d31c0625c2d36311e876c07a758 This helps make it possible to use `SecureDir` (name pending) even when we want to disable permissions checks. Otherwise, optional permission checking would require users of this crate to maintain separate code paths for the "check" and "don't check" cases. fs-mistrust: Make self-named groups trusted by default. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-02T15:08:40Z urn:sha1:ab190d21866c8816d2188473548a4e9ce95284df fs-mistrust: Add code to make a self-named group "trusted". 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-27T19:20:56Z urn:sha1:85d7084d953e67e50c6a735af0e90f1f85c3f75b This required a bit of poking through the `users` crate, to mess with the user and group dbs. The original goal was to "trust the group with the same name as us", but it turned into a bit of a production, since: * We want to take our own name from $USER, assuming that matches our uid. (Otherwise we want to ask getpwuid_r().) * We only want to trust the group if we are actually a member of that group. * We want to cache this information. * We want to test this code. fs-mistrust: more examples, documentation. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-24T15:12:45Z urn:sha1:7254fc60eb69b652b01f841c2fe835208b20f362 Add a SecureDir API for checked access to directories 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-21T15:32:54Z urn:sha1:7f27744ef7b4bc6aafe9b9b1b4cfec3b99f64d23 The only way to get a SecureDir is by having checked a directory. Once you have one, it encourages you to open and create files and directories with the right permissions, and checks them for you. Add functionality to inspect directory content permissions 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-19T00:23:23Z urn:sha1:75633109c2a75cef0769983ec1b3d20496d1ee38 Also, explain _why_ this is pretty important. By default, forbid special files. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-18T21:14:30Z urn:sha1:d574afa230cca3dc3603d8786aeb31432640cfd6 Support for "create missing directory". 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-18T14:35:42Z urn:sha1:2042d0934b26f2bc5b4748bc880f837310499926