16:30 kwm 

Add patches to gamin to enable support for effective uid/gid, add a option for
this and turn it on by default.

Current gamin uses the current real uid to determine the location of the
socket and during the security routines. It also forks off a copy of
"gam_server" as the current real uid as well.

This breaks gamin functionality with any application that uses effective an
uid/gid for privilege separation, such as samba. Samba runs as root, but
always sets the effective uid/gid to that of the connecting user. Since
gamin is only aware of the real uid, it always creates a root-owned gamin
socket that the effective user can't touch (gamin's own security checks
refuse it).

PR:		ports/176203
Submitted by:	Danny Warren <danny@dannywarren.com>
Reviewed by:	marcus@

 

06:40 marcus 

* Update to 0.1.7, and add support for file system type detection (currently,
  only UFS file systems are handled by kqueue, but this might change in the
  future if kqueue on NFS proves stable) [1]

* Switch py-gamin to use USE_FAM+WANT_FAM_SYSTEM

* Switch test target to regression-test so that pointyhat will run tests
  automatically

Submitted by:   ale [1]

20:56 marcus 

Fix alignment problems when checking socket credentials on non-i386
platforms.

22:57 marcus 

Gamin was using its own, debugging, versions of the g_list glib functions.
They were written to find problems in GList usage, but were causing gamin
to segfault on 4.X.  Disable debugging by default, and only use the debugging
versions of g_list_* if debugging is enabled.

Additionally, add <string.h> to gam_api.c which would certainly fix problems
on 4.X alpha.

Reported by:    Stefan Thurner <thurners@nicsys.de>

19:41 jylefort 

Update to 0.1.0

05:31 marcus 

Fix gamin on -CURRENT by not using LOCAL_CREDS.  While it works, it does
not provide the pid information that the cmsgcred structure gives us.
Gamin will now behave the same way on all versions of FreeBSD.

08:22 adamw 

Fix build on 4.X.

09:08 marcus 

Add gamin, a file and directory monitoring server and API.  Gamin can be
used as a drop-in replacement for FAM.  Gamin is designed to be more secure
than FAM as itdoes not require RPC, and runs a separate instance for each
user.  While it is API and ABI compatible with FAM, it does not [yet]
support all of FAM's features.

This version of gamin comes with an optional (defaults to on) kqueue
backend for FreeBSD.  This backend can only be used with UFS file
systems.  If you need FAM-like support on non-UFS file systems, you
must build without the kqueue backend.