Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sd-log tries to log to itself, but loopback qrexec connections aren't supported #755

Closed
eaon opened this issue Jan 21, 2022 · 1 comment · Fixed by #764
Closed

sd-log tries to log to itself, but loopback qrexec connections aren't supported #755

eaon opened this issue Jan 21, 2022 · 1 comment · Fixed by #764

Comments

@eaon
Copy link
Contributor

eaon commented Jan 21, 2022

While looking into policy changes/details this stuck out to me: qrexec: securedrop.Log: sd-log -> sd-log: denied: loopback qrexec connection not supported. @conorsch confirmed this also affects 4.0 when we briefly touched on this in passing in #751, but I think this is worth breaking out for a different reason:

On 4.0 this denial is silent for users, but 4.1 ramped up user facing reporting of such denials, so this triggers a fairly alarming ⛔ notification visible when running the preflight updater:

Screenshot_2022-01-21_17-54-04

While it's functionally not a problem as far as I've gathered, this may warrant handling to improve the optics.

@eaon
Copy link
Contributor Author

eaon commented Jan 24, 2022

While looking into qrexec for another project over the weekend, freedomofpress/securedrop-client#1721 graced my screen. I believe by simply installing the proposed log-server but not log-forwarder package onto sd-log this denial wouldn't come up anymore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant