From 2b15ff66ecc2d528a546af266dffeb49404369aa Mon Sep 17 00:00:00 2001 From: Nathan Freitas Date: Sun, 15 Jan 2012 10:45:18 -0500 Subject: [PATCH] more updates to limit localhost port access --- src/org/torproject/android/service/TorTransProxy.java | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/org/torproject/android/service/TorTransProxy.java b/src/org/torproject/android/service/TorTransProxy.java index aed3a02f..e5ba7329 100644 --- a/src/org/torproject/android/service/TorTransProxy.java +++ b/src/org/torproject/android/service/TorTransProxy.java @@ -454,6 +454,8 @@ public class TorTransProxy implements TorServiceConstants { script.append(ipTablesPath); script.append(" -t filter"); script.append(" -A OUTPUT"); + script.append(" -m owner ! --uid-owner "); + script.append(torUid); script.append(" -p tcp"); script.append(" -d 127.0.0.1"); script.append(" --dport ");