uwt: set TORSOCKS_ISOLATE_PID in Debian Stretch?
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Patrick
	Jun 17 2015, 5:48 PM

Description

There isn't a lot information on TORSOCKS_ISOLATE_PID yet. Will be introduced in the torsocks version which is now in Debian version 9 codename Stretch.

Quote https://lists.torproject.org/pipermail/tor-talk/2015-May/037979.html:

IsolatePID is a new option that will make torsocks set the SOCKS5 username and password automatically to provide isolation on Tor side.

You can use this with the -i,--isolate command added or TORSOCKS_ISOLATE_PID env. variable.

It could help to get rid of the whole uwt temporary file creation hack.

Details

Impact: Normal

Related Objects

Mentioned In: T65: drop uwt as soon as torsocks gets native stream isolation support

Event Timeline

Patrick created this task.Jun 17 2015, 5:48 PM

Patrick raised the priority of this task from to Normal.

Patrick updated the task description. (Show Details)

Patrick added projects: Debian version 9 codename Stretch, uwt.

Patrick set Impact to Normal.

Patrick added subscribers: Patrick, HulaHoop.

Herald added a project: Whonix. · View Herald TranscriptJun 17 2015, 5:48 PM

Herald added subscribers: • WhonixQubes, troubadour. · View Herald Transcript

It could help to get rid of the whole uwt temporary file creation hack.

Yes.

More information:

https://www.mankier.com/8/torsocks

TORSOCKS_ISOLATE_PID

Set the username and password for the SOCKS5 authentication method to a PID/current time based value automatically. Username and Password MUST NOT be set.

https://lists.torproject.org/pipermail/tor-dev/2015-May/008871.html

*Change IsolatePID password from 42 to 0

*Add automatic per process isolation (IsolatePID)

AFAICT this will be default behavior since we don't set passwords for Tor SOCKS. It will isolate circuits based on different PIDs it detects automatically.

Patrick added a project: Whonix 14.Jan 18 2017, 5:59 AM

Not enabled by default.

Debian version 9 codename Stretch /etc/tor/torsocks.conf

# Set Torsocks to use an automatically generated SOCKS5 username/password based
# on the process ID and current time, that makes the connections to Tor use a
# different circuit from other existing streams in Tor on a per-process basis.
# If set, the SOCKS5Username and SOCKS5Password options must not be set.
# (Default: 0)
#IsolatePID 1

https://github.com/Whonix/uwt/commit/c2f471d97573680bf00992ac775296da0fe9ac35

https://github.com/Whonix/uwt/commit/d1a64bd9a6016ee527b127b380676f97aa1d53ca

https://github.com/Whonix/uwt/commit/66447a54d37a88a78bb9a2056cd410c0c2bf12ab

https://www.whonix.org/wiki/Stream_Isolation#Whonix_14_and_above

Patrick mentioned this in T65: drop uwt as soon as torsocks gets native stream isolation support.Jan 18 2017, 9:33 AM

Patrick closed this task as Resolved.Mar 7 2018, 12:16 AM

Patrick claimed this task.

uwt: set TORSOCKS_ISOLATE_PID in Debian Stretch?Closed, ResolvedPublicActions

Description

Details

Related Objects

Event Timeline

uwt: set TORSOCKS_ISOLATE_PID in Debian Stretch?
Closed, ResolvedPublic
Actions