From owner-cvs-all@FreeBSD.ORG Sun Apr 13 23:21:21 2008 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4D7571065670; Sun, 13 Apr 2008 23:21:21 +0000 (UTC) (envelope-from cokane@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 3C2A88FC1E; Sun, 13 Apr 2008 23:21:21 +0000 (UTC) (envelope-from cokane@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m3DNLLJW011840; Sun, 13 Apr 2008 23:21:21 GMT (envelope-from cokane@repoman.freebsd.org) Received: (from cokane@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m3DNLLnh011839; Sun, 13 Apr 2008 23:21:21 GMT (envelope-from cokane) Message-Id: <200804132321.m3DNLLnh011839@repoman.freebsd.org> From: Coleman Kane Date: Sun, 13 Apr 2008 23:21:21 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/security/seahorse Makefile ports/security/seahorse/files patch-libseahorse_seahorse-secure-memory.c patch-libseahorse_seahorse-secure-memory.h X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Apr 2008 23:21:21 -0000 cokane 2008-04-13 23:21:20 UTC FreeBSD ports repository (src committer) Modified files: security/seahorse Makefile Added files: security/seahorse/files patch-libseahorse_seahorse-secure-memory.c patch-libseahorse_seahorse-secure-memory.h Log: Add some improved logic to seahorse to have it gracefully fall back to insecure memory usage for sensitive storage when gnome-keyring doesn't have the privileges to use mlock(2)/munlock(2). This behavior is much more useful than the ungraceful dereference of a NULL pointer (and subsequent crash of the seahorse programs) that currently is employed. This patch makes seahorse (and seahorse-agent, seahorse-daemon, etc.) warn the user about having to use secure memory so that consumers such as Evolution and other software can make use of seahorse. A larger and more valuable project would be to provide some sort of unprivileged user mlock(2) support in the base system. Some ideas are currently being discussed. Reviewed by: marcus, gnome@, imp Approved by: marcus (gnome) Revision Changes Path 1.65 +1 -0 ports/security/seahorse/Makefile 1.1 +42 -0 ports/security/seahorse/files/patch-libseahorse_seahorse-secure-memory.c (new) 1.1 +11 -0 ports/security/seahorse/files/patch-libseahorse_seahorse-secure-memory.h (new)