Commit 0057b814 authored by Tails developers's avatar Tails developers
Browse files

Needs less work than expected, eventually.

parent 3a745f5b
......@@ -9,7 +9,17 @@ discussing it and making a decision, hence the todo/research tag :)
> has access to the `` address space, there should be
> no possibility of any more leaks than in other situations.
>> This is a trivial change that could be made to our `ferm.conf`.
>> Let's try this.
>> Actually, in Tails 0.17.2, as said above only the `amnesia` user
>> has access to Tor's `TransPort` (9040). Any other user who tries
>> to use an automapped address (``) is forbidden to do
>> so:
>> Dropped outbound packet: IN= OUT=lo SRC= DST= LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7190 DF PROTO=TCP SPT=58781 DPT=9040 WINDOW=32792 RES=0x00 SYN URGP=0 UID=0 GID=0
>> Test case for anyone to reproduce: `curl` after
>> having `tor-resolve`'d `2eghzlv2wwcq7u7y.onion` to
>> Therefore, what's already in place does exactly what we decided we
>> wanted. Time to document it in the implementation notes.
[[!tag todo/test]]
[[!tag todo/documentation]]
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment