sandbox: allow access to cookie files, approved-routers

fixes part of 12064

1 files changed, 10 insertions, 0 deletions

diff --git a/src/or/config.c b/src/or/config.c
index 0f7b1d2a2..f0b559da2 100644
--- a/src/or/config.c
+++ b/src/or/config.c
@@ -3750,6 +3750,16 @@ options_transition_allowed(const or_options_t *old,
                         " while Sandbox is active");
       return -1;
     }
+    if (! opt_streq(old->CookieAuthFile, new_val->CookieAuthFile)) {
+      *msg = tor_strdup("Can't change CookieAuthFile while Sandbox is active");
+      return -1;
+    }
+    if (! opt_streq(old->ExtORPortCookieAuthFile,
+                    new_val->ExtORPortCookieAuthFile)) {
+      *msg = tor_strdup("Can't change ExtORPortCookieAuthFile"
+                        " while Sandbox is active");
+      return -1;
+    }
   }
 
   return 0;