nevaforget
9d7f39fe05
SEC-01 (security audit, LOW): the avatar load followed symlinks via gio::File while the wallpaper load was already O_NOFOLLOW-hardened — the project's lock-path hardening was applied inconsistently. Share one read_file_nofollow loader for both file reads so they cannot diverge again; a symlinked ~/.face now fails open with ELOOP and falls back to the default avatar. Adds loader unit tests (regular file, symlink->ELOOP). Bundles clippy cleanup: c"" literal in auth.rs, let-chains, drop redundant gtk4_session_lock import, blur guard via .filter() (unifies with moongreet/moonset).
34 lines
780 B
TOML
34 lines
780 B
TOML
[package]
|
|
name = "moonlock"
|
|
version = "0.6.19"
|
|
edition = "2024"
|
|
description = "A secure Wayland lockscreen with GTK4, PAM and fingerprint support"
|
|
license = "MIT"
|
|
|
|
[dependencies]
|
|
gtk4 = { version = "0.11", features = ["v4_10"] }
|
|
gtk4-session-lock = { version = "0.4", features = ["v1_2"] }
|
|
glib = "0.22"
|
|
gdk4 = "0.11"
|
|
gdk-pixbuf = "0.22"
|
|
gio = "0.22"
|
|
toml = "0.8"
|
|
serde = { version = "1", features = ["derive"] }
|
|
graphene-rs = { version = "0.22", package = "graphene-rs" }
|
|
nix = { version = "0.29", features = ["user"] }
|
|
zeroize = { version = "1", features = ["derive", "std"] }
|
|
libc = "0.2"
|
|
log = "0.4"
|
|
systemd-journal-logger = "2.2"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[build-dependencies]
|
|
glib-build-tools = "0.22"
|
|
|
|
[profile.release]
|
|
lto = "fat"
|
|
codegen-units = 1
|
|
strip = true
|