goldwarden-vaultwarden-bitw.../agent/processsecurity/unix.go

87 lines
1.6 KiB
Go

//go:build linux || freebsd
package processsecurity
import (
"time"
"github.com/godbus/dbus/v5"
"golang.org/x/sys/unix"
)
func DisableDumpable() error {
return unix.Prctl(unix.PR_SET_DUMPABLE, 0, 0, 0, 0)
}
func MonitorLocks(onlock func()) error {
bus, err := dbus.SessionBus()
if err != nil {
return err
}
err = bus.AddMatchSignal(dbus.WithMatchInterface("org.gnome.ScreenSaver"))
if err != nil {
return err
}
err = bus.AddMatchSignal(dbus.WithMatchInterface("org.freedesktop.ScreenSaver"))
if err != nil {
return err
}
signals := make(chan *dbus.Signal, 10)
bus.Signal(signals)
for {
select {
case message := <-signals:
if message.Name == "org.gnome.ScreenSaver.ActiveChanged" {
if len(message.Body) == 0 {
continue
}
locked, err := message.Body[0].(bool)
if err || locked {
onlock()
}
}
if message.Name == "org.freedesktop.ScreenSaver.ActiveChanged" {
if len(message.Body) == 0 {
continue
}
locked, err := message.Body[0].(bool)
if err || locked {
onlock()
}
}
}
}
return nil
}
func MonitorIdle(onidle func()) error {
bus, err := dbus.SessionBus()
if err != nil {
return err
}
var wasidle = false
for {
var res int64
err = bus.Object("org.gnome.Mutter.IdleMonitor", "/org/gnome/Mutter/IdleMonitor/Core").Call("org.gnome.Mutter.IdleMonitor.GetIdletime", 0).Store(&res)
if err != nil {
return err
}
secondsIdle := res / 1000
if secondsIdle > 60*1 {
if !wasidle {
wasidle = true
onidle()
}
} else {
wasidle = false
}
time.Sleep(1 * time.Second)
}
return nil
}