106 lines
2.0 KiB
Go
106 lines
2.0 KiB
Go
package dbus
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"io"
|
|
"sync"
|
|
|
|
"git.ophivana.moe/security/fortify/helper"
|
|
"git.ophivana.moe/security/fortify/helper/bwrap"
|
|
)
|
|
|
|
// ProxyName is the file name or path to the proxy program.
|
|
// Overriding ProxyName will only affect Proxy instance created after the change.
|
|
var ProxyName = "xdg-dbus-proxy"
|
|
|
|
// Proxy holds references to a xdg-dbus-proxy process, and should never be copied.
|
|
// Once sealed, configuration changes will no longer be possible and attempting to do so will result in a panic.
|
|
type Proxy struct {
|
|
helper helper.Helper
|
|
bwrap *bwrap.Config
|
|
|
|
name string
|
|
session [2]string
|
|
system [2]string
|
|
|
|
seal io.WriterTo
|
|
lock sync.RWMutex
|
|
}
|
|
|
|
func (p *Proxy) Session() [2]string {
|
|
return p.session
|
|
}
|
|
|
|
func (p *Proxy) System() [2]string {
|
|
return p.system
|
|
}
|
|
|
|
func (p *Proxy) Sealed() bool {
|
|
p.lock.RLock()
|
|
defer p.lock.RUnlock()
|
|
|
|
return p.seal != nil
|
|
}
|
|
|
|
var (
|
|
ErrConfig = errors.New("no configuration to seal")
|
|
)
|
|
|
|
func (p *Proxy) String() string {
|
|
if p == nil {
|
|
return "(invalid dbus proxy)"
|
|
}
|
|
|
|
p.lock.RLock()
|
|
defer p.lock.RUnlock()
|
|
|
|
if p.helper != nil {
|
|
return p.helper.Unwrap().String()
|
|
}
|
|
|
|
if p.seal != nil {
|
|
return p.seal.(fmt.Stringer).String()
|
|
}
|
|
|
|
return "(unsealed dbus proxy)"
|
|
}
|
|
|
|
func (p *Proxy) Bwrap() []string {
|
|
return p.bwrap.Args()
|
|
}
|
|
|
|
// Seal seals the Proxy instance.
|
|
func (p *Proxy) Seal(session, system *Config) error {
|
|
p.lock.Lock()
|
|
defer p.lock.Unlock()
|
|
|
|
if p.seal != nil {
|
|
panic("dbus proxy sealed twice")
|
|
}
|
|
|
|
if session == nil && system == nil {
|
|
return ErrConfig
|
|
}
|
|
|
|
var args []string
|
|
if session != nil {
|
|
args = append(args, session.Args(p.session)...)
|
|
}
|
|
if system != nil {
|
|
args = append(args, system.Args(p.system)...)
|
|
}
|
|
if seal, err := helper.NewCheckedArgs(args); err != nil {
|
|
return err
|
|
} else {
|
|
p.seal = seal
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// New returns a reference to a new unsealed Proxy.
|
|
func New(session, system [2]string) *Proxy {
|
|
return &Proxy{name: ProxyName, session: session, system: system}
|
|
}
|