[tor-project] cve monthly status report -- May 2025

Hello tor-project@,
the following contains the work I have done for The Tor Project, Inc. in
May 2025.

# Migration to Payroll Provider

Starting on the 2nd of June, I will no longer be a contractor and
instead be an employee. This also means that this will be the last
status report of its kind from me, as it is a contractor thing.

Besides this, nothing much will change though. I will continue to work
for The Tor Project, Inc., only the way on how I get my salary will
change.

# oniux

This month, the comms team and I wrote a blog post introducing oniux[1],
which was well received across the internet. So far, it already made it
into several distributions and the overall feedback has been very
positive.

Besides this, we released v0.4.0 and v0.5.0 of oniux, with v0.4.0
introducing a large change, namely implementing oniux in a capability
free fashion by utilizing the concept of `user_namespaces(7)`. The
v0.5.0 mostly contained bug fixes for some paper cuts that became
evident after users reported them the moment the blog post became viral.

# onionmasq

This month, I finally merged a new integration test suite into
onionmasq, which is no longer as flaky as it once was. Primarily, this
change is of rather internal nature and probably not very interesting to
users of the application.

More interestingly however, I fixed a bug where onionmasq leaked
resources on mobile devices, namely ticket #141.

As always, I also performed various general maintainer tasks, such as
fixing CI warnings and updating dependencies.

# arti dircache

Most of my work this month went into the technical design of the
directory cache that will soon be implemented in arti. I did this with
the help of Diziet and so far the progress is going great. Looking
forward to start writing actual code very soon, as the database schema
is more or less finished.

Besides, this work also resulted in some changes within the
specification, as reading them revealed some ambiguities which have been
addressed appropriately.

Thank You
Clara

[1]: Introducing oniux: Kernel-level Tor isolation for any Linux app | The Tor Project

···

_______________________________________________
tor-project mailing list -- tor-project@lists.torproject.org
To unsubscribe send an email to tor-project-leave@lists.torproject.org

1 Like