Skip to content

Whitelisting filter for dangerous Tor control protocol commands - https://www.whonix.org/wiki/Dev/CPFP - For example it allows using Tor Browser's New Identity feature on Anonymity Distribution Workstations, fixes Tor Browser's about:tor default homepage and Tor Button status indicator without exposing commands that are dangerous for anonymity.

License

HulaHoopWhonix/control-port-filter-python

Repository files navigation

Whitelisting filter for dangerous Tor control protocol commands

Filters out Tor control protocol commands that are dangerous for anonymity such as GETINFO ADDRESS using a whitelist. Acts as a proxy between the client application and Tor.

For example it allows using Tor Browser's New Identity feature on Anonymity Distribution Workstations, fixes Tor Browser's about:tor default homepage and Tor Button status indicator without exposing commands that are dangerous for anonymity.

This package is supposed to be installed on Anonymity Distributions.

It seamlessly integrates if the anon-ws-disable-stacked-tor package is installed on a Anonymity Distribution Workstations. For example it then allows running a unmodified Tor Browser Bundle from The Tor Project without Tor over Tor and with functional New Identity and about:tor.

This control-port-filter is written in Python. The original Python code was forked from the Tails version of control port filter.

This package is produced independently of, and carries no guarantee from, The Tor Project.

(This package description has been automatically extracted and mirrored from debian/control.)

Generic Readme

Readme Version

Generic Readme Version 0.3

Cooperating Anonymity Distributions

Generic Readme beings here. Have a look into the man sub folder (if available).

The functionality of this package was once exclusively available in the Whonix (github) anonymity distribution.

Because multiple projects and individuals stated interest in various of Whonix's functionality (examples: Qubes OS (discussion); piratelinux (discussion)), it's best to share as much source code as possible, it's best to share certain characteristics (such as /etc/hostname etc.) among all anonymity distributions) Whonix has been split into multiple separate packages.

Generic Packaging

Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages looks very similar.

How to use outside of Debian or derivatives

Although probably due to generic packaging not very hard. Still, this requires developer skills. Ports welcome!

How to Build deb Package

See comments below and instructions.

  • Replace apparmor-profile-torbrowser with the actual name of this package (equals the root source folder name of this package after you git cloned it).
  • You only need config-package-dev, when it is listed in the Build-Depends: field in debian/control.
  • Many packages do not have signed git tags yet. You may request them if desired.
  • We might later use a documentation template.

How to install in Debian using apt-get

Binary packages are available in Whonix's APT repository. By no means you are required to use the binary version of this package. This might be interesting for users of Debian and derivatives. Note, that usage of this package outside of Whonix is untested and there is no maintainer that supports this use case.

1. Get Whonix's Signing Key.

2. Add Whonix's Signing Key to apt-key.

gpg --export 916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA | sudo apt-key add -

3. Add Whonix's APT repository.

echo "deb http://sourceforge.net/projects/whonixdevelopermetafiles/files/internal/ wheezy main" > /etc/apt/sources.list.d/whonix.list

4. Update your package lists.

sudo apt-get update

5. Install this package. Replace package-name with the actual name of this package.

sudo apt-get install package-name

Cooperation

Most welcome. Ports, distribution maintainers, developers, patches, forks, testers, comments, etc. all welcome.

Contact

Donate

About

Whitelisting filter for dangerous Tor control protocol commands - https://www.whonix.org/wiki/Dev/CPFP - For example it allows using Tor Browser's New Identity feature on Anonymity Distribution Workstations, fixes Tor Browser's about:tor default homepage and Tor Button status indicator without exposing commands that are dangerous for anonymity.

Resources

License

Stars

Watchers

Forks

Packages

No packages published