nevaforget
d292eaa4c8
Security-audit follow-up. The release profile had silently drifted from the hardened profile (v0.6.12): v0.6.14 bundled lto fat->thin, strip true->false, and debug=true into an unrelated refactor — a debug aid for the suspend/resume SIGSEGV hunt. That crash is fixed (v0.6.17), so restore lto=fat + strip=true and drop the debug symbols, which on a security-critical auth binary only ease reverse-engineering of the auth path and bloat the binary. Also remove two vestigial struct fields the audit surfaced: never read, no behavior change. - LockscreenHandles.password_entry: the entry is fully wired via internal closures before the handles return; no caller read the field. - User.uid: superseded by getuid() (root check) and username lookups.
34 lines
780 B
TOML
34 lines
780 B
TOML
[package]
|
|
name = "moonlock"
|
|
version = "0.6.18"
|
|
edition = "2024"
|
|
description = "A secure Wayland lockscreen with GTK4, PAM and fingerprint support"
|
|
license = "MIT"
|
|
|
|
[dependencies]
|
|
gtk4 = { version = "0.11", features = ["v4_10"] }
|
|
gtk4-session-lock = { version = "0.4", features = ["v1_2"] }
|
|
glib = "0.22"
|
|
gdk4 = "0.11"
|
|
gdk-pixbuf = "0.22"
|
|
gio = "0.22"
|
|
toml = "0.8"
|
|
serde = { version = "1", features = ["derive"] }
|
|
graphene-rs = { version = "0.22", package = "graphene-rs" }
|
|
nix = { version = "0.29", features = ["user"] }
|
|
zeroize = { version = "1", features = ["derive", "std"] }
|
|
libc = "0.2"
|
|
log = "0.4"
|
|
systemd-journal-logger = "2.2"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[build-dependencies]
|
|
glib-build-tools = "0.22"
|
|
|
|
[profile.release]
|
|
lto = "fat"
|
|
codegen-units = 1
|
|
strip = true
|