Changeset 2d358f2 in trunk

Timestamp:

2016-08-29T01:15:30Z (9 years ago)

Author:

Brian Warner <warner@…>

Branches:

master

Children:

2d8a1e8

Parents:

0951201

git-author:

Brian Warner <warner@…> (2016-08-28 22:21:27)

git-committer:

Brian Warner <warner@…> (2016-08-29 01:15:30)

Message:

Disable foolscap "gifts"

"gifts" are third-party references (where Alice sends Bob a reference to
Carol, and Carol lives in a different Tub than either Alice or Bob).
Tahoe doesn't currently use these, and they make it possible for e.g. a
server to provoke a client into making a connection to an IP address of
the server's choosing. If the client isn't configured otherwise, this
would use raw TCP (revealing the client's IP address) even if the
connection to the server used Tor.

A connection policy of tcp: tor would block this, but it seems like a
good idea to disable gifts entirely.

closes ticket:2810

File:

• src/allmydata/node.py (modified) (1 diff)

src/allmydata/node.py ¶

@@ -267 +267 @@
             "logRemoteFailures": True,
             "expose-remote-exception-types": False,
+            "accept-gifts": False,
             }