summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | arti-client: Configure and use fs-mistrust.Nick Mathewson2022-05-096-8/+72
| | | | | | | | | | | | | | | | | | This is derived from the environment, not the configuration file: We might not want to trust the configuration file until we've decided whether we like its permissions.
| * | Update tor-dirmgr to use fs-mistrust.Nick Mathewson2022-05-097-86/+116
| | |
| * | tor-persist: Use fs-mistrust to verify state file permissions.Nick Mathewson2022-05-094-35/+55
| | |
| * | Add new FsPermissions ErrorKind.Nick Mathewson2022-05-091-0/+9
| | |
| * | fs-mistrust: add various methods.Nick Mathewson2022-05-092-7/+174
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes: * a CachedDir::join method. * functions to read and write from provided filenames in a CachedDir. * a method to tell whether a fs-mistrust error is about bad file permissions, or failure to inspect file permissions or some other kind of IO problem.
| * | Derive Clone and Debug for CheckedDir.Nick Mathewson2022-05-051-0/+1
| | |
| * | gitlab-ci: Disable fs mistrust in integration testNick Mathewson2022-05-051-0/+3
| | | | | | | | | | | | | | | | | | The environment where the test runner does its thing seems to want to run as root with umask 000, which naturally makes the fs permissions checks freak out.
* | | Merge branch 'netparams' into 'main'Nick Mathewson2022-05-092-3/+3
|\ \ \ | | | | | | | | | | | | | | | | NetParams: Document its role as a validated config parameter See merge request tpo/core/arti!492
| * | | NetParams: Document its role as a validated config parameterIan Jackson2022-05-092-3/+3
|/ / /
* | | Merge branch 'coverage-weekly' into 'main'Ian Jackson2022-05-065-34/+80
|\ \ \ | | | | | | | | | | | | | | | | export coverage to pages See merge request tpo/core/arti!489
| * | | only deploy pages on maintrinity-1686a2022-05-051-1/+1
| | | |
| * | | use true instead of /bin/truetrinity-1686a2022-05-051-2/+2
| | | | | | | | | | | | | | | | see https://gitlab.torproject.org/tpo/core/arti/-/issues/400#note_2800763
| * | | add schedulable job to generate aggregated coveragetrinity-1686a2022-05-051-6/+45
| | | |
| * | | generate aggregated coverage reportstrinity-1686a2022-05-052-13/+20
| | | |
| * | | chutney test stop network when arti died or did not starttrinity-1686a2022-05-052-15/+15
| | | |
* | | | A few small changelog style edits.arti-v0.3.0Nick Mathewson2022-05-061-6/+6
| | | |
* | | | Merge remote-tracking branch 'origin/mr/491'Nick Mathewson2022-05-061-2/+2
|\ \ \ \
| * | | | CHANGELOG.md: resolve minor typoseta2022-05-061-2/+2
| | | | |
* | | | | Clear semver_status now that 0.3.0 is coming out.Nick Mathewson2022-05-061-72/+1
| | | | |
* | | | | Bump the version of every* crate to 0.3.0Nick Mathewson2022-05-0634-218/+218
| | | | | | | | | | | | | | | | | | | | * Except for safelog and fs-mistrust, which are new.
* | | | | Change safelog version to 0.1.0.Nick Mathewson2022-05-064-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | (This is okay because we haven't published it yet, or any crate that uses it.)
* | | | | Update README.md files (automated).Nick Mathewson2022-05-0610-16/+307
|/ / / /
* | | | CHANGELOG.md: light reformatting.Nick Mathewson2022-05-061-14/+0
| | | |
* | | | Finish the CHANGELOG.md for 0.3.0Nick Mathewson2022-05-061-24/+53
| | | |
* | | | Merge branch 'derive-builder-fork' into 'main'Nick Mathewson2022-05-069-32/+35
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switch to derive_builder_arti_fork Closes #446 See merge request tpo/core/arti!490
| * | | | Switch to derive_builder_arti_forkIan Jackson2022-05-069-32/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For reference, the git source for this crate (and the others in its workspace) currently lives in my personal github account (ijackson). If this fork turns out to be long-lived and gains features and/or users, it would be good to move it to a gitlab somewhere. I have granted Nick crate ownership on the crates.io system.
* | | | | Merge branch 'safelogging' into 'main'Nick Mathewson2022-05-0614-7/+799
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | Implement a safe-logging facility. Closes #189 See merge request tpo/core/arti!485
| * | | | Punctuation fix.eta2022-05-061-1/+1
| | | | |
| * | | | Disable safe-logging when logging to console.Nick Mathewson2022-05-061-1/+30
| | | | |
| * | | | arti: add support for safe-logging configurationNick Mathewson2022-05-062-3/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Here we add a config option to disable safe logging, and ensure that safe logging is disabled when we are formatting an error message on exit (since we assume it's safe to write sensitive info to stderr.)
| * | | | Apply `sensitive` in some info-level log messages.Nick Mathewson2022-05-066-3/+11
| | | | | | | | | | | | | | | | | | | | | | | | | This specifically applies the `sensitive` wrapper in the places where we're logging target addresses at level "info" or higher.
| * | | | Implement a safe-logging facility.Nick Mathewson2022-05-067-0/+723
|/ / / / | | | | | | | | | | | | | | | | | | | | This is a rough first-cut of an API that I think might help us with keeping limited categories of sensitive information out of our logs. I'll refine it based on experiences with using it.
* | | | Merge branch 'typos-20220504' into 'main'eta2022-05-054-6/+6
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | Fix typos (using the typos-cli tool). See merge request tpo/core/arti!486
| * | | Fix typos (using the typos-cli tool).Nick Mathewson2022-05-044-6/+6
| | | |
* | | | Merge branch 'config-serde' into 'main'Nick Mathewson2022-05-0514-103/+63
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | Make config builders, not validated structs, [de]serialize See merge request tpo/core/arti!487
| * | | semver notes: Fix a missing parenIan Jackson2022-05-051-1/+1
| | | |
| * | | semver note about serde attribute changesIan Jackson2022-05-051-0/+2
| | | |
| * | | config derive attrs: Make builders serde, and validated structs notIan Jackson2022-05-0511-98/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Builders additionally derive: Debug, Serialize, Deserialize. * Validated structs no longer derive: Serialize, Deserialize and all related attributes deleted. * As a consequence, all the `#[serde(deny_unknown_fields)]` are gone. That means that right now unknown fields are totally ignored. This is good for compatibility but poor for useability. Doing something better here is arti#417, in progress. * As a consequence, delete tor_dirmgr::retry::default_parallelism. (The default value was already duplicated into a builder attr.)
| * | | serde attributes: A tiny bit of reorderingIan Jackson2022-05-052-3/+3
| | | | | | | | | | | | | | | | Having a consistent order will make the nest commit easier to read.
| * | | Make LogRotation SerializeIan Jackson2022-05-051-1/+1
|/ / / | | | | | | | | | We want to be able to serialise as well as deserialise configurations.
* / / Start drafting a changelog for 0.3.0Nick Mathewson2022-05-041-0/+109
|/ /
* | Run "cargo update" in preparation for a release... next week?Nick Mathewson2022-05-041-133/+133
| |
* | Merge branch 'socket-addr-list-builder' into 'main'Ian Jackson2022-05-0411-53/+136
|\ \ | | | | | | | | | | | | FallbackDir: orports: Introduce and use VecBuilder See merge request tpo/core/arti!474
| * | list_builder: Add some xrefs about macro_rules limitationsIan Jackson2022-05-041-0/+8
| | | | | | | | | | | | | | | Apropos https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/474#note_2800481
| * | Fix typoNick Mathewson2022-05-041-1/+1
| | |
| * | FallbackDir: Use VecBuilder for orportsIan Jackson2022-05-047-37/+47
| | | | | | | | | | | | | | | | | | | | | And drop the ad-hoc orport() method. This brings FallbackDir's orports field in line with our list builder API. The general semver note in "configuation" seems to cover most of this.
| * | FallbackDir: Do orport validation after autogenerated buildIan Jackson2022-05-041-5/+11
| | | | | | | | | | | | This avoids it having to recapitulate defaulting logic.
| * | FallbackDir: Do not consider defaulted-empty orport list to be validIan Jackson2022-05-041-7/+5
| | |
| * | list_builder: Update semver noteIan Jackson2022-05-041-1/+2
| | |
| * | list_builder: Provide VecBuilderIan Jackson2022-05-041-0/+41
| | | | | | | | | | | | This is for lists of plain types (non-builder types).