Vidalia Relay Bundle installer starts relay on Administrator login
(Same installation as bug #5803 (closed)) Downloaded Vidalia Relay Bundle from https://www.torproject.org/download/download.html.en vidalia-relay-bundle-0.2.2.35-0.2.17.exe sha1sum 6157dfb5fa8690e3451beefcb003bc4999dd8508
MS Win 7 64 bit Ran installer as normal user but allowed elevation to Admin user when requested. Accepted default installation path. Did not opt to run directly after installing.
When I log in as the Administrator account Vidalia starts immediately and begins relaying traffic before I can stop it. This is bad.
When I log in as the normal user account the relay is not started. I can start it manually. This is not bad.
There is no entry in the 'Start menu' 'Startup' folder. It seems likely that the installer (which had been elevated to Admin) is adding an entry to the HKCU current user registry key which launches new apps at login.
Ideally the installer could be run as non-Admin. Few if any app installers ever pull this off.
The installer could also offer to create a service. This would require local Admin, but AFAICT there's no reason Tor.exe should need to run with Admin privileges.
Trac:
Username: marshray