config/chroot_local-patches/use_ipv4_instead_of_localhost_for_monkeysphere.patch

   1 When Torbrowser patches are applied and the `socks_remote_dns` set to true,
   2 Iceweasel will not allow any name resolution that does not go through a proxy.
   3 This means that in order to be reachable by the Monkeysphere extension, MSVA
   4 must export the IPv4 address and not 'localhost' in
   5 `$MONKEYSPHERE_VALIDATION_AGENT_SOCKET`.
   6
   7 --- chroot.orig/usr/share/perl5/Crypt/Monkeysphere/MSVA.pm      2012-11-14 14:49:35.301666762 +0100
   8 +++ chroot/usr/share/perl5/Crypt/Monkeysphere/MSVA.pm   2012-11-14 14:50:10.010692842 +0100
   9 @@ -886,12 +886,12 @@
  10            }
  11            # restore default SIGCHLD handling:
  12            $SIG{CHLD} = 'DEFAULT';
  13 -          $ENV{MONKEYSPHERE_VALIDATION_AGENT_SOCKET} = sprintf('http://localhost:%d', $self->port);
  14 +          $ENV{MONKEYSPHERE_VALIDATION_AGENT_SOCKET} = sprintf('http://127.0.0.1:%d', $self->port);
  15            exec(@args) or exit 111;
  16          }
  17        }
  18      } else {
  19 -      printf("MONKEYSPHERE_VALIDATION_AGENT_SOCKET=http://localhost:%d;\nexport MONKEYSPHERE_VALIDATION_AGENT_SOCKET;\n", $self->port);
  20 +      printf("MONKEYSPHERE_VALIDATION_AGENT_SOCKET=http://127.0.0.1:%d;\nexport MONKEYSPHERE_VALIDATION_AGENT_SOCKET;\n", $self->port);
  21        # FIXME: consider daemonizing here to behave more like
  22        # ssh-agent.  maybe avoid backgrounding by setting
  23        # MSVA_NO_BACKGROUND.