nyxnor / onionwash Goto Github PK

https://forums.whonix.org/t/tor-ctrl-tor-control-port-command-line-tool/8074/26

• anon-verify
  • torrc-parser
• anon-info

Anon-verify will be done, seems useful and can be system agnostic.
Anon-info not sure, it depends on debian hosts and having a sources list named torproject.list.

sudoedit the program can't be used because in the current state of vitor, but I've found it to be the easiest way to set correct permisisons to the original state.

sudoedit makes a mode 600 copy on /var/tmp/filename.XXXXXX.

But it does not have the same characteristic from visudo to warn file is busy. Using sudoedit with mousepad, if I run sudoedit on the same file on two different terminals, it opens the file the second time but on the temrinal it prints file unchanged and remove the copy. This is possibly a bug on sudoedit, where it opens the editor before checking the file is being used.

nyxnor/tor-ctrl#20

/usr/share/applications/vitor.desktop

[Desktop Entry]
Type=Application
Exec=sh -c 'vitor;sleep 5'
Terminal=true
Name=Vitor - Edit tor configuration files (torrc)
GenericName=Vitor - Edit tor configuration files (torrc)
Comment=Vitor - Edit tor configuration files (torrc)
Categories=System
Icon=/usr/share/icons/anon-icon-pack/nyx.ico ## update icon
Keywords=system;tor;torrc;vitor;vi;

Need to update the icon but I don't have one

Benefit:

• No need to use terminal wrapper
• No need to use shortcuts that just refer to the command then sleep
• Sleep just some seconds and the window will be closed automatically.

I'll be sharing your Tor / security related projects on special media.

• https://twitter.com/Whonix/status/1495084528343597058
• https://twitter.com/Whonix/status/1495050799399030790
• https://twitter.com/Whonix/status/1489588468653170690

(Also auto posted to facebook and perhaps a few others if automation is functional. Otherwise might be posted elsewhere depending on contributor availability.)

But hootsuite accepts only image, gif, video (probably social media limitation).

If https://asciinema.org/a/463445?autoplay=1 was available as gif or video, I'd like to share that too.

Might also be useful to announce on mailing lists here's a small list but probably a lot more places (Tor forum?) nowadays.
https://www.whonix.org/wiki/Dev/Redistribution#Announcement

• Qt application https://github.com/adrelanos/sdwdate-gui
  or
• Tcl https://wiki.tcl-lang.org/page/Tcl+Tutorial+Lesson+0

on Tails

amnesia@amnesia:~/vitor$ sudo vitor -u debian-tor
[sudo] password for amnesia:
tor: [warn] Tor was compiled with zstd 1.3.8, but is running with zstd 1.4.8. For safety, we'll avoid using advanced zstd functionality.
vitor: /etc/tor/torrc.PZpzir is a valid configuration but warnings were received.

The annoying thing is that it does not have anything to do with config parsing but still appears when verifying it.
The problem is that I don't know if this is the only exception because I'd like to have warnings about ControlPort configured but not Authentication method configured, that is bad, but not about compiled and running packages on some tool related to config parsing.

Currently only verifying one config because normally you edit the main configuration file and it will include other configurations with %include.

But if user is editing an included file, and he set the same option that was made on another included file, that will overwrite previous options, setting to the last one. The warn won't be given and it will run of course but vitor would be catching this problem.

But I can't also run blindly just tor --verify-config because if built from source it will read /usr/local/etc/tor/torrc and I don't use that.

Or what I think would be better but would require more work and testings is:

• use the same method from tor-ctrl to read from system the tor files https://github.com/nyxnor/tor-ctrl/blob/ea1ddcd507f480113626563b129d47800065481c/usr/bin/tor-ctrl#L125
• if file was not read/included on that verification, run file by itself because it could be just a test file on /tmp/torrc.

Anyway, maybe nothing is done in this case because it vitor will explictly say the configuration is valid but warnings were received. Maybe add you can ignore warnings if other tor configuration files will fix this problem.

tor: required
m4: optional, just used to be posix but even vidoas does not use it and it is used for a lot of BSDs and Linux (A port of OpenBSD's doas which runs on FreeBSD, Linux, NetBSD, illumos, macOS and MidnightBSD.)
https://github.com/slicer69/doas/blob/08167d8054876b3f427c32e5dc12facd61fc699f/vidoas#L160

Removing m4 will make it compatible by just copying the script to path without needing to worry with dependencies, except tor of course, you should have tor installed.

http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/vitor-safely-edit-the-tor-configuration-file/13213/20