FM / gamin

/usr/share/doc/gamin

Name	Size	Mode	Actions
AUTHORS	153	0644	edit dl rm
callbacks.gif	4514	0644	edit dl rm
ChangeLog	83256	0644	edit dl rm
client_server.gif	4624	0644	edit dl rm
config.html	6883	0644	edit dl rm
contacts.html	5358	0644	edit dl rm
debug.html	7373	0644	edit dl rm
debugging.txt	1288	0644	edit dl rm
devel.html	4968	0644	edit dl rm
differences.html	6769	0644	edit dl rm
downloads.html	4200	0644	edit dl rm
FAQ.html	3963	0644	edit dl rm
gamin.html	32385	0644	edit dl rm
index.html	8104	0644	edit dl rm
internals.html	5420	0644	edit dl rm
NEWS	9710	0644	edit dl rm
news.html	14456	0644	edit dl rm
overview.html	5324	0644	edit dl rm
python.html	6292	0644	edit dl rm
README	1516	0644	edit dl rm
security.html	6768	0644	edit dl rm
server_structs.gif	8880	0644	edit dl rm
socket.txt	1630	0644	edit dl rm
TODO	2654	0644	edit dl rm
using.html	4096	0644	edit dl rm

Edit: /usr/share/doc/gamin/socket.txt (1630B)

If there is abstract socket support:
====================================

use them as "\0/tmp/fam-$USER-$GAM_CLIENT_ID"
  They are not mapped on the filesystem, no attack is possible that way.
  The client and the server checks on the first '\0' byte received that
  the other side is of the same UID

If there is no abstract socket support:
=======================================

Server side:
------------

start:
  try to create /tmp/fam-$USER using mkdir('/tmp/fam-$USER', 007)
  if error:
      make a stat() on it
      if doesn't exist:
          return failure to create
      if user is not getuid() or mode is not 007 or type is not dir:
          try to unlink()
	  if error:
	      exit with error.
	  if success:
	      goto start:
 
  do the socket()/bind() on /tmp/fam-$USER/fam-$GAM_CLIENT_ID
  
Client side:
------------

make a stat on /tmp/fam-$USER
  if doesn't exist:
      return failure to create should start the server
  if user is not getuid() or mode is not 007 or type is not dir:
      try to unlink()
      if error:
          exit with error.
      if success:
          return failure should start the server
  make a stat on /tmp/fam-$USER/fam-$GAM_CLIENT_ID
  if doesn't exist:
      return failure to create should start the server
  if user is not getuid() or type is not socket:
      try to unlink()
      if error:
          exit with error.
      if success:
          return failure should start the server

do the socket()/connect() on /tmp/fam-$USER/fam-$GAM_CLIENT_ID

The client and the server checks on the first '\0' byte received that
  the other side is of the same UID.

If there is abstract socket support: ==================================== use them as "\0/tmp/fam-$USER-$GAM_CLIENT_ID" They are not mapped on the filesystem, no attack is possible that way. The client and the server checks on the first '\0' byte received that the other side is of the same UID If there is no abstract socket support: ======================================= Server side: ------------ start: try to create /tmp/fam-$USER using mkdir('/tmp/fam-$USER', 007) if error: make a stat() on it if doesn't exist: return failure to create if user is not getuid() or mode is not 007 or type is not dir: try to unlink() if error: exit with error. if success: goto start: do the socket()/bind() on /tmp/fam-$USER/fam-$GAM_CLIENT_ID Client side: ------------ make a stat on /tmp/fam-$USER if doesn't exist: return failure to create should start the server if user is not getuid() or mode is not 007 or type is not dir: try to unlink() if error: exit with error. if success: return failure should start the server make a stat on /tmp/fam-$USER/fam-$GAM_CLIENT_ID if doesn't exist: return failure to create should start the server if user is not getuid() or type is not socket: try to unlink() if error: exit with error. if success: return failure should start the server do the socket()/connect() on /tmp/fam-$USER/fam-$GAM_CLIENT_ID The client and the server checks on the first '\0' byte received that the other side is of the same UID.