Import sfw build 131 Bugs Fixed ---------- 6818295 [nvb110] Mysql server core dump when running tests 'execution_constants' 6826438 Update S-Lang to version 2.2.2 6865279 guile-config configures with guile 6886529 fixed rrset-order is not enabled in BIND 9.6.1 as was the intention. 6891703 Tor should use newer release 6891913 deliver httpd conf file for PHP integration via FastCGI when mod_php can't be used 6893187 CVE-2009-2820 Web Interface of CUPS 1.4.1 is susceptible to Cross-Site Scripting and CRLF injection 6899209 Compile zend_execute.c with -W2,-Ainline:inc=100 for performance gains. 6900557 CVE-2009-3553 cupsd crash due to a pointer use-after-free flaw 6902877 [nvb127] subselect test generates crash of the server. 6902912 DNS Cache Poisoning 6903940 [nvb127] zlib extension not delivered 6905246 CUPS upgrade to 1.4.2 6905928 PostgreSQL 8.2, 8.3 Makefiles need some love 6907454 apache22 fcgid fails to load, daemon starts, stops and restarts ad nauseum 6908140 gpgconf and gpgme-config report incorrect pathnames 6908543 sfw updates expose new package dependencies 6908980 bad links for /usr/postgres/8.3/share/locale(s) in osol_128a for SUNWpostgr-83-libs 6909121 SFW METADATA files need updates for SUPPORT data 6909137 cups 1.4.2 does not deliver dbus notifier 6909139 Update PostgreSQL to 8.3.9 6909140 Update PostgreSQL to 8.2.15 6909141 Update PostgreSQL to 8.4.2 6909592 print/service-selector races with manifest-import 6910254 upgrade php to 5.2.12 6910945 Tomcat shouldn't give 404 when SUNWtcat-examples is not installed 6911455 gpgconf still reports wrong directory for libexec 6911767 back port 6.0 php dtrace to track object creation in php 5.2 6911775 Wireshark update to version 1.2.5 6912139 seek return value can be -1 within zlib streams 6912354 core dump while running ldap_next_reference functions 6912643 add libproxy support to 64-bit libneon 6913465 opensolaris b130 PHP problems with session_start();

     1

--- src/config/torrc.sample.in	Mon May 25 10:38:04 2009

     2

+++ src/config/torrc.sample.in.new	Tue Dec 15 06:33:03 2009

     3

@@ -32,12 +32,12 @@

     4

 ## We advise using "notice" in most cases, since anything more verbose

     5

 ## may provide sensitive information to an attacker who obtains the logs.

     6

 ##

     7

-## Send all messages of level 'notice' or higher to @LOCALSTATEDIR@/log/tor/notices.log

     8

+## Send all messages of level 'notice' or higher to /var/log/tor/notices.log

     9

 #Log notice file @LOCALSTATEDIR@/log/tor/notices.log

    10

-## Send every possible message to @LOCALSTATEDIR@/log/tor/debug.log

    11

-#Log debug file @LOCALSTATEDIR@/log/tor/debug.log

    12

+## Send every possible message to /var/log/tor/debug.log

    13

+Log debug file @LOCALSTATEDIR@/log/tor/debug.log

    14

 ## Use the system log instead of Tor's logfiles

    15

-#Log notice syslog

    16

+Log notice syslog

    17

 ## To send all messages to stderr:

    18

 #Log debug stderr

    19

    20

@@ -44,11 +44,11 @@

    21

 ## Uncomment this to start the process in the background... or use

    22

 ## --runasdaemon 1 on the command line. This is ignored on Windows;

    23

 ## see the FAQ entry if you want Tor to run as an NT service.

    24

-#RunAsDaemon 1

    25

+RunAsDaemon 1

    26

    27

 ## The directory for keeping all the keys/etc. By default, we store

    28

 ## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.

    29

-#DataDirectory @LOCALSTATEDIR@/lib/tor

    30

+DataDirectory @LOCALSTATEDIR@/lib/tor

    31

    32

 ## The port on which Tor will listen for local connections from Tor

    33

 ## controller applications, as documented in control-spec.txt.

    34

@@ -79,7 +79,7 @@

    35

 ## See https://www.torproject.org/docs/tor-doc-relay for details.

    36

    37

 ## Required: what port to advertise for incoming Tor connections.

    38

-#ORPort 9001

    39

+ORPort 9001

    40

 ## If you want to listen on a port other than the one advertised

    41

 ## in ORPort (e.g. to advertise 443 but bind to 9090), uncomment the

    42

 ## line below too. You'll need to do ipchains or other port forwarding