[tor-project] cve's monthly status report -- April 2025

Hello tor-project@,
the following contains a list of the work I have done for Tor in April
2025.

# arti

* Assisted gabi in the release of 1.4.2
* Removed a dead code reference in the RPC API
* Added a gitignore for Python
* Added a CI check for wildcard requirements in Cargo.toml files

# onionmasq

* Updated arti to 1.4.2
* Fixed rust-clippy CI container failure
* Migrated all containers to a common image
* Rewrote the integration test suite to a much cleaner implementation
  that is not using dirty hacks such as nested bash scripts

# onionprobe

* Began working on a rewrite of this tool in Rust
    * Rewrite is already capable of many features, with the exports to
      Prometheus and friends being the notable exception at the moment.

# oniux

* Worked together with a contributor to make oniux work without
  capabilities, by using user namespaces!
    * This is a really cool thing I am pretty proud of. :slightly_smiling_face:
* Fixed a bug regarding mounting by studying the mount(2) syscall in
  depth and re-mounting '/' with MS_PRIVATE | MS_REC everywhere in order
  to avoid "leaks" outside of the mount namespace
* Improved the overall documentation of oniux

# misc

* I had some time off this month due to two public holidays as well as a
  sickness from which I had to recover (nothing serious, just a common
  cold, I am already doing fine again)
* There was also some legal stuff regarding my planned switch from a
  contractor to an employee
* I submitted a talk about onion services to the GPN23 in Karlsruhe

···

_______________________________________________
tor-project mailing list -- tor-project@lists.torproject.org
To unsubscribe send an email to tor-project-leave@lists.torproject.org

2 Likes