Page MenuHomePhabricator

uwt: set TORSOCKS_ISOLATE_PID in Debian Stretch?
Closed, ResolvedPublic

Description

There isn't a lot information on TORSOCKS_ISOLATE_PID yet. Will be introduced in the torsocks version which is now in Debian version 9 codename Stretch.

Quote https://lists.torproject.org/pipermail/tor-talk/2015-May/037979.html:

  • IsolatePID is a new option that will make torsocks set the SOCKS5 username and password automatically to provide isolation on Tor side. You can use this with the -i,--isolate command added or TORSOCKS_ISOLATE_PID env. variable.

It could help to get rid of the whole uwt temporary file creation hack.

Details

Impact
Normal

Event Timeline

Patrick created this task.Jun 17 2015, 7:48 PM
Patrick raised the priority of this task from to Normal.
Patrick updated the task description. (Show Details)
Patrick set Impact to Normal.
Patrick added subscribers: Patrick, HulaHoop.

It could help to get rid of the whole uwt temporary file creation hack.

Yes.

More information:

https://www.mankier.com/8/torsocks

TORSOCKS_ISOLATE_PID

Set the username and password for the SOCKS5 authentication method to a PID/current time based value automatically. Username and Password MUST NOT be set.

https://lists.torproject.org/pipermail/tor-dev/2015-May/008871.html

*Change IsolatePID password from 42 to 0

*Add automatic per process isolation (IsolatePID)

AFAICT this will be default behavior since we don't set passwords for Tor SOCKS. It will isolate circuits based on different PIDs it detects automatically.

Not enabled by default.

Debian version 9 codename Stretch /etc/tor/torsocks.conf

# Set Torsocks to use an automatically generated SOCKS5 username/password based
# on the process ID and current time, that makes the connections to Tor use a
# different circuit from other existing streams in Tor on a per-process basis.
# If set, the SOCKS5Username and SOCKS5Password options must not be set.
# (Default: 0)
#IsolatePID 1
Patrick closed this task as Resolved.Mar 7 2018, 1:16 AM
Patrick claimed this task.