• 2026-07-02 ca6b0569a6

    2026-07-02
    All checks were successful
    Build and Push Docker Image / build (push) Successful in 23s
    Stable

    eric released this 2026-07-02 10:38:34 -07:00 | 0 commits to main since this release

    Hardening: torrc path parsing

    Following a security audit (no exploitable findings), tightened one robustness issue in entrypoint-wrapper.sh.

    Changed

    • HiddenServiceDir entries are now read into an array (mapfile + awk) and iterated with quoted expansion. Paths containing spaces or glob metacharacters are handled correctly instead of being word-split or glob-expanded.
    • Removes a latent grep-returns-1 edge case in the parse step.

    Impact

    • No behavior change for standard configs (all README examples use simple /var/lib/tor/... paths).
    • No security impact — torrc is operator-authored and mounted read-only; this is a config-robustness fix only.
    Downloads