Page MenuHomePhabricator
Create Task
Maniphest T356

uwt: set TORSOCKS_ISOLATE_PID in Debian Stretch?
Closed, ResolvedPublic
Actions

Description

There isn't a lot information on TORSOCKS_ISOLATE_PID yet. Will be introduced in the torsocks version which is now in Debian version 9 codename Stretch.

Quote https://lists.torproject.org/pipermail/tor-talk/2015-May/037979.html:

  • IsolatePID is a new option that will make torsocks set the SOCKS5 username and password automatically to provide isolation on Tor side.

    You can use this with the -i,--isolate command added or TORSOCKS_ISOLATE_PID env. variable.

It could help to get rid of the whole uwt temporary file creation hack.

Details

Impact
Normal

Related Objects

Event Timeline

Patrick created this task.Jun 17 2015, 7:48 PM
Patrick raised the priority of this task from to Normal.
Patrick updated the task description. (Show Details)
Patrick added projects: Debian version 9 codename Stretch, uwt.
Patrick set Impact to Normal.
Patrick added subscribers: Patrick, HulaHoop.
HulaHoop added a comment.Jun 18 2015, 3:44 AM

It could help to get rid of the whole uwt temporary file creation hack.

Yes.

More information:

https://www.mankier.com/8/torsocks

TORSOCKS_ISOLATE_PID

Set the username and password for the SOCKS5 authentication method to a PID/current time based value automatically. Username and Password MUST NOT be set.

https://lists.torproject.org/pipermail/tor-dev/2015-May/008871.html

*Change IsolatePID password from 42 to 0

*Add automatic per process isolation (IsolatePID)

AFAICT this will be default behavior since we don't set passwords for Tor SOCKS. It will isolate circuits based on different PIDs it detects automatically.

Patrick added a comment.Jan 18 2017, 9:37 AM

Not enabled by default.

Debian version 9 codename Stretch /etc/tor/torsocks.conf

# Set Torsocks to use an automatically generated SOCKS5 username/password based
# on the process ID and current time, that makes the connections to Tor use a
# different circuit from other existing streams in Tor on a per-process basis.
# If set, the SOCKS5Username and SOCKS5Password options must not be set.
# (Default: 0)
#IsolatePID 1
Patrick closed this task as Resolved.Mar 7 2018, 1:16 AM
Patrick claimed this task.
Whonix Issue Tracker · Unread Notifications · Open Issues · Homepage · Blog · Forum · Github · Legal · Imprint · Privacy Policy · Terms of Use · Disclaimer