Re: [Tails-dev] OnionShare bug in Tails

Delete this message

Reply to this message
Autor: Micah Lee
Data:  
A: intrigeri
CC: tails-dev
Assumpte: Re: [Tails-dev] OnionShare bug in Tails
On 05/15/2015 11:21 AM, intrigeri wrote:
> Hi Micah,
>
> Micah Lee wrote (15 May 2015 00:11:53 GMT) :
>> OnionShare recently stopped working in Tails
> Can you please be more specific wrt. what version of Tails worked for
> you, and what version stopped working?


I just tested a bunch of old versions of Tails in VMs and confirmed that
it last worked in 1.2.3 and stopped working in 1.3.

>
>> Specifically, OnionShare is able to connect to the Tor control port, but
>> when it tries to create a hidden service it now causes the entire tor
>> process to crash, and it looks like this is related to Tor sandbox
>> warnings. You can look at the issue on github to see the full tor logs,
>> but basically there are a handful of "sandbox_intern_string(): Bug: No
>> interned sandbox parameter found for /var/lib/tor/tmpBuBZmk" errors
>> (/var/lib/tor/tmpBuBZmk being the hidden service dir), ending with a
>> crash: "(Sandbox) Caught a bad syscall attempt (syscall open)".
> Looks like a bug in Tor sandbox rather than anything Tails-specific
> to me.


Agreed, but I haven't run into it anywhere except in Tails. Maybe this
is because all other platforms use the tor service from Tor Browser
rather than a system Tor, and that doesn't have sandboxing enabled or
something?

>> So I can find very little information about what's causing this or how
>> to fix it. Anyone here know?
> 0. Make sure there are no AppArmor-related messages for Tor in `sudo
>    dmesg`. If there are, please report them to us.


There are no AppArmor errors.

> 1. Try without Tor sandboxing (configuring a bridge as documented via
>    Tails Greeter + Tor Launcher should be enough, since we disable the
>    sandbox when special Tor config is requested).


When I enable a bridge it doesn't cause the tor crash. So I think this
is a Tor sandbox issue.

However, onionshare fails for some other reason when a bridge is
enabled. I think this is an entirely separate issue, but I'm looking
into it.

> 2. If #1 confirmed that the only problem is caused by Tor sandboxing,
>    report a bug on the Tor bug tracker: we don't maintain the Tor
>    sandbox in Tails :)


Apparently tor immediately crashes in Tor Browser if you edit its torrc
and set "Sandbox 1". So now I'm testing using a system Tor in Debian,
not Tails, and I can confirm that starting a hidden service causes a
crash. I'll try to make a simpler piece of code that reproduces it and
open a tor bug.

--
Micah Lee
OpenPGP: 0B1491929806596254700155FD720AD9EBA34B1C