fortify/dbus/setup.go

package dbus

import (
	"errors"
	"os"
	"os/exec"
	"strings"
	"sync"
)

// Proxy holds references to a xdg-dbus-proxy process, and should never be copied.
// Once sealed, configuration changes will no longer be possible and attempting to do so will result in a panic.
type Proxy struct {
	cmd *exec.Cmd

	statP [2]*os.File
	argsP [2]*os.File

	path    string
	session [2]string
	system  [2]string

	wait  *chan error
	read  *chan error
	ready *chan bool

	seal *string
	lock sync.RWMutex
}

func (p *Proxy) String() string {
	if p == nil {
		return "(invalid dbus proxy)"
	}

	p.lock.RLock()
	defer p.lock.RUnlock()

	if p.cmd != nil {
		return p.cmd.String()
	}

	if p.seal != nil {
		return *p.seal
	}

	return "(unsealed dbus proxy)"
}

// Seal seals the Proxy instance.
func (p *Proxy) Seal(session, system *Config) error {
	p.lock.Lock()
	defer p.lock.Unlock()

	if p.seal != nil {
		panic("dbus proxy sealed twice")
	}

	if session == nil && system == nil {
		return errors.New("no configuration to seal")
	}

	seal := strings.Builder{}

	if session != nil {
		if err := session.buildSeal(&seal, p.session); err != nil {
			return err
		}
	}
	if system != nil {
		if err := system.buildSeal(&seal, p.system); err != nil {
			return err
		}
	}

	v := seal.String()
	p.seal = &v
	return nil
}

// New returns a reference to a new unsealed Proxy.
func New(binPath string, session, system [2]string) *Proxy {
	return &Proxy{path: binPath, session: session, system: system}
}