moonlock

nevaforget/moonlock

Fork 0

Commit Graph

Author	SHA1	Message	Date
nevaforget	d11b6e634e	fix: audit fixes — D-Bus sender validation, fp lifecycle, multi-monitor caching (v0.6.0) Close the only exploitable auth bypass: validate VerifyStatus signal sender against fprintd's unique bus name. Fix fingerprint D-Bus lifecycle so devices are properly released on verify-match and async restarts check the running flag between awaits. Security: num_msg guard in PAM callback, symlink rejection for background_path, peek icon disabled, TOML parse errors logged, panic hook before logging. Performance: blur and avatar textures cached across monitors, release profile with LTO/strip.	2026-03-28 22:47:09 +01:00
nevaforget	4026f6dafa	fix: audit fixes — double-unlock guard, PAM OOM code, GPU blur, async fp stop (v0.5.1) Security: prevent double unlock() when PAM and fingerprint succeed simultaneously (ext-session-lock protocol error). Fix PAM callback returning PAM_AUTH_ERR instead of PAM_BUF_ERR on calloc OOM. Performance: replace CPU-side Gaussian blur (image crate) with GPU blur via GskBlurNode + GskRenderer::render_texture(). Eliminates 500ms-2s main-thread blocking on cold cache for 4K wallpapers. Remove image and dirs dependencies (~15 transitive crates). Make fingerprint stop() fire-and-forget async to avoid 6s UI block after successful auth.	2026-03-28 22:06:38 +01:00
nevaforget	de9a3e9e6a	feat: add optional background blur, align to shared texture pattern Gaussian blur applied at texture load time when `background_blur` is set in moonlock.toml. Refactored wallpaper loading from per-window Picture::for_filename() to shared gdk::Texture pattern (matching moonset/moongreet), avoiding redundant JPEG decoding on multi-monitor.	2026-03-28 14:53:27 +01:00

Author

SHA1

Message

Date

nevaforget

d11b6e634e

fix: audit fixes — D-Bus sender validation, fp lifecycle, multi-monitor caching (v0.6.0)

Close the only exploitable auth bypass: validate VerifyStatus signal sender
against fprintd's unique bus name. Fix fingerprint D-Bus lifecycle so devices
are properly released on verify-match and async restarts check the running
flag between awaits.

Security: num_msg guard in PAM callback, symlink rejection for background_path,
peek icon disabled, TOML parse errors logged, panic hook before logging.

Performance: blur and avatar textures cached across monitors, release profile
with LTO/strip.

2026-03-28 22:47:09 +01:00

nevaforget

4026f6dafa

fix: audit fixes — double-unlock guard, PAM OOM code, GPU blur, async fp stop (v0.5.1)

Security: prevent double unlock() when PAM and fingerprint succeed
simultaneously (ext-session-lock protocol error). Fix PAM callback
returning PAM_AUTH_ERR instead of PAM_BUF_ERR on calloc OOM.

Performance: replace CPU-side Gaussian blur (image crate) with GPU blur
via GskBlurNode + GskRenderer::render_texture(). Eliminates 500ms-2s
main-thread blocking on cold cache for 4K wallpapers. Remove image and
dirs dependencies (~15 transitive crates). Make fingerprint stop()
fire-and-forget async to avoid 6s UI block after successful auth.

2026-03-28 22:06:38 +01:00

nevaforget

de9a3e9e6a

feat: add optional background blur, align to shared texture pattern

Gaussian blur applied at texture load time when `background_blur` is
set in moonlock.toml. Refactored wallpaper loading from per-window
Picture::for_filename() to shared gdk::Texture pattern (matching
moonset/moongreet), avoiding redundant JPEG decoding on multi-monitor.

2026-03-28 14:53:27 +01:00

3 Commits