nevaforget
9dfd1829e9
- fingerprint: split cleanup_dbus into a sync take_cleanup_proxy() + async perform_dbus_cleanup(). resume_async now awaits VerifyStop+Release before re-claiming, so fprintd cannot reject the Claim on a slow bus. stop() still spawns the cleanup fire-and-forget. - fingerprint: remove failed_attempts = 0 from resume_async. An attacker with sensor control could otherwise cycle verify-match → account-fail → resume and never trip the 10-attempt cap. - lockscreen: open the wallpaper with O_NOFOLLOW and build the texture from bytes, closing the TOCTOU between the symlink check and Texture:: from_file. - lockscreen: clear password_entry immediately after extracting the Zeroizing<String>, shortening the window the GLib GString copy stays in libc-malloc'd memory.
34 lines
781 B
TOML
34 lines
781 B
TOML
[package]
|
|
name = "moonlock"
|
|
version = "0.6.11"
|
|
edition = "2024"
|
|
description = "A secure Wayland lockscreen with GTK4, PAM and fingerprint support"
|
|
license = "MIT"
|
|
|
|
[dependencies]
|
|
gtk4 = { version = "0.11", features = ["v4_10"] }
|
|
gtk4-session-lock = { version = "0.4", features = ["v1_2"] }
|
|
glib = "0.22"
|
|
gdk4 = "0.11"
|
|
gdk-pixbuf = "0.22"
|
|
gio = "0.22"
|
|
toml = "0.8"
|
|
serde = { version = "1", features = ["derive"] }
|
|
graphene-rs = { version = "0.22", package = "graphene-rs" }
|
|
nix = { version = "0.29", features = ["user"] }
|
|
zeroize = { version = "1", features = ["derive", "std"] }
|
|
libc = "0.2"
|
|
log = "0.4"
|
|
systemd-journal-logger = "2.2"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[build-dependencies]
|
|
glib-build-tools = "0.22"
|
|
|
|
[profile.release]
|
|
lto = "thin"
|
|
codegen-units = 1
|
|
strip = true
|