aboutsummaryrefslogtreecommitdiff
path: root/crates/arti/src/process.rs
Commit message (Collapse)AuthorAgeFilesLines
* Throughout: Use *_report!() macros for reporting Errors.Nick Mathewson2023-07-071-2/+1
| | | | | | | | | | | | | | | I identified the cases to replace by searching for the string `.report()`. There are a few that I didn't change: * A couple of cases that used anyhow::Error, * One case that reported two Errors. * Two cases in `tor_hsclient::err` that just did `error!("Bug: {}")`. I have also not audited the cases in `tor-hsclient` where we're using `tor_error::Report` manually. Nonetheless, closes #949.
* Provided a fix for #831 - 'Unused import' warnings on WindowsAndy2023-06-231-3/+4
|
* Update our secmem_proc dependency to 0.3.0Nick Mathewson2023-04-131-1/+1
| | | | | | (This wasn't possible before we updated our MSRV to 1.65.) Closes #664.
* Use ErrorReport/Report for errors in warn! in artiIan Jackson2023-01-301-1/+2
|
* remove manual limitation of coredump sizetrinity-1686a2022-10-051-4/+0
| | | | it's already disabled by secmem_proc
* fix compilation error with async-stdtrinity-1686a2022-09-061-2/+3
|
* Add functionality to listen for SIGHUPs.Nick Mathewson2022-08-261-0/+22
|
* arti: Do not allow running as root.Nick Mathewson2022-08-241-0/+26
| | | | | | This can be overridden with `application.allow_running_as_root`. Part of #523.
* arti: Add support for process hardeningNick Mathewson2022-08-151-0/+32
| | | | | | | | | | | | | This is a compile-time feature with an associated configuration flag, both enabled by default. When it's turned on, hardening prevents the arti process from dumping core or being attached to by low-privileged processes. (This is a defense-in-depth measure, not an absolute way to prevent attacks. For more information, see [`secmem_proc`](https://docs.rs/secmem-proc/0.1.1/secmem_proc/).) Closes #364.
* arti: Move most public APIs behind `experimental-api`.Nick Mathewson2022-08-111-1/+2
| | | | | | | | | | | | | | | | | The remaining unconditionally public APIs are those related to our configuration objects, and the main_main() API. The rationale for making main_main() public is to have an actual entry point. The rationale for making the config APIs public is: 1. We really do intend for others to be able to read our configuration files using this API. 2. The structure of our configuration files is already part of our interface. Closes #530.
* Move SystemConfig to arti::cfgIan Jackson2022-03-211-2/+2
| | | | Fixes #314, #418.
* arti: Make main module entrypoints pubIan Jackson2022-03-111-1/+1
| | | | | This does not constitute any kind of stable API promise. But it might allow people to use our arti client code in novel ways.
* Upgrade dependency to new version of rlimit.Nick Mathewson2022-02-251-1/+1
|
* Make max_file_limit configurableNeel Chauhan2022-01-281-11/+4
|
* arti: On startup, increase the NOFILE resource limit.Nick Mathewson2021-10-141-0/+25
The default soft limit is typically enough for process usage on most Unixes, but OSX has a pretty low default (256), which you can run into easily under heavy usage. With this patch, we're going to aim for as much as 16384, if we're allowed. Fixes part of #188.