mirrors/arti.git/crates/fs-mistrust, branch arti-v0.3.0 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v0.3.0 2022-05-06T13:51:11Z Update README.md files (automated). 2022-05-06T13:51:11Z Nick Mathewson nickm@torproject.org 2022-05-06T13:51:11Z urn:sha1:9447e6935551a4d3824dede6016e1eac09b77b53 Fix typos (using the typos-cli tool). 2022-05-04T18:41:50Z Nick Mathewson nickm@torproject.org 2022-05-04T18:36:27Z urn:sha1:fc33fc3efbfabd6d7d38334caedbea51ad6c8064 fs-mistrust: write a lot about TOCTOU issues. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-03T13:56:23Z urn:sha1:f35b4881295f52c252236b151764e82dbcb3b332 fs-mistrust: Rename SecureDir to CheckedDir. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-03T13:00:50Z urn:sha1:2f467245ca6925f8573ab2d4aadb1f9c874352f4 fs-mistrust: Add a dangerously_trust_everyone method. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-02T15:35:15Z urn:sha1:2087dde3a07a8d31c0625c2d36311e876c07a758 This helps make it possible to use `SecureDir` (name pending) even when we want to disable permissions checks. Otherwise, optional permission checking would require users of this crate to maintain separate code paths for the "check" and "don't check" cases. fs-mistrust: split check_one into two functions. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-02T15:19:22Z urn:sha1:0c01fb97ac3571b927384069ff7ebdbc15dfa856 This will make a "trust_everyone" easier to implement. fs-mistrust: Make self-named groups trusted by default. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-05-02T15:08:40Z urn:sha1:ab190d21866c8816d2188473548a4e9ce95284df Work around CI config weirdness. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-28T13:30:42Z urn:sha1:703ad41265d887e946fe855c84bebeb8c1c94cde Some of our builders put root into gid 0, but getgroups() doesn't actually give any result. fs-mistrust: Add code to make a self-named group "trusted". 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-27T19:20:56Z urn:sha1:85d7084d953e67e50c6a735af0e90f1f85c3f75b This required a bit of poking through the `users` crate, to mess with the user and group dbs. The original goal was to "trust the group with the same name as us", but it turned into a bit of a production, since: * We want to take our own name from $USER, assuming that matches our uid. (Otherwise we want to ask getpwuid_r().) * We only want to trust the group if we are actually a member of that group. * We want to cache this information. * We want to test this code. fs-mistrust: refactor ResolvePath to avoid temporary changes. 2022-05-03T14:03:32Z Nick Mathewson nickm@torproject.org 2022-04-27T15:58:30Z urn:sha1:c09a613590a0e2b8b6e3fcea601f6dfddab7b60a Previously we would temporarily put self.resolved into an invalid state by adding a path component that might be a symlink. With this change, we create a new temporary path object (using Cow to avoid unnecessary allocations) and only conditionally replace self.resolved.