-
2026-07-02
StableAll checks were successfulBuild and Push Docker Image / build (push) Successful in 23sreleased this
2026-07-02 10:38:34 -07:00 | 0 commits to main since this releaseHardening: torrc path parsing
Following a security audit (no exploitable findings), tightened one robustness issue in
entrypoint-wrapper.sh.Changed
HiddenServiceDirentries are now read into an array (mapfile+awk) and iterated with quoted expansion. Paths containing spaces or glob metacharacters are handled correctly instead of being word-split or glob-expanded.- Removes a latent
grep-returns-1 edge case in the parse step.
Impact
- No behavior change for standard configs (all README examples use simple
/var/lib/tor/...paths). - No security impact —
torrcis operator-authored and mounted read-only; this is a config-robustness fix only.
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download