package linux import ( "io/fs" "os/user" "path" "strconv" "git.ophivana.moe/security/fortify/internal/fmsg" ) // System provides safe access to operating system resources. type System interface { // Geteuid provides [os.Geteuid]. Geteuid() int // LookupEnv provides [os.LookupEnv]. LookupEnv(key string) (string, bool) // TempDir provides [os.TempDir]. TempDir() string // LookPath provides [exec.LookPath]. LookPath(file string) (string, error) // Executable provides [os.Executable]. Executable() (string, error) // Lookup provides [user.Lookup]. Lookup(username string) (*user.User, error) // ReadDir provides [os.ReadDir]. ReadDir(name string) ([]fs.DirEntry, error) // Stat provides [os.Stat]. Stat(name string) (fs.FileInfo, error) // Open provides [os.Open] Open(name string) (fs.File, error) // Exit provides [os.Exit]. Exit(code int) // FshimPath returns an absolute path to the fshim binary. FshimPath() string // Paths returns a populated [Paths] struct. Paths() Paths // SdBooted implements https://www.freedesktop.org/software/systemd/man/sd_booted.html SdBooted() bool } // Paths contains environment dependent paths used by fortify. type Paths struct { // path to shared directory e.g. /tmp/fortify.%d SharePath string `json:"share_path"` // XDG_RUNTIME_DIR value e.g. /run/user/%d RuntimePath string `json:"runtime_path"` // application runtime directory e.g. /run/user/%d/fortify RunDirPath string `json:"run_dir_path"` } // CopyPaths is a generic implementation of [System.Paths]. func CopyPaths(os System, v *Paths) { v.SharePath = path.Join(os.TempDir(), "fortify."+strconv.Itoa(os.Geteuid())) fmsg.VPrintf("process share directory at %q", v.SharePath) if r, ok := os.LookupEnv(xdgRuntimeDir); !ok || r == "" || !path.IsAbs(r) { // fall back to path in share since fortify has no hard XDG dependency v.RunDirPath = path.Join(v.SharePath, "run") v.RuntimePath = path.Join(v.RunDirPath, "compat") } else { v.RuntimePath = r v.RunDirPath = path.Join(v.RuntimePath, "fortify") } fmsg.VPrintf("runtime directory at %q", v.RunDirPath) }