🔒 Fix insecure fallback directory and secure file creation

mirror of https://github.com/arabianq/pipewire-soundpad.git synced 2026-06-19 12:13:32 +00:00

The daemon's fallback runtime directory `get_runtime_dir()` was hardcoded to `/run/pwsp`, creating a risk of shared, insecure access in multi-user systems.
This commit secures the fallback logic by:
1. Creating a user-specific temporary directory (`/tmp/pwsp-$UID`).
2. Ensuring directory creation happens atomically with `0o700` permissions using `std::fs::DirBuilder`.
3. Validating the fallback directory strictly (checking UID, 0o700 permissions, and symlink status) if it already exists to mitigate symlink attacks.
4. Using `libc::geteuid()` for robust cross-platform UID extraction.
5. Fixing `is_daemon_running` and locking logic to use `fs::OpenOptions` instead of `fs::File::create` to prevent accidental file truncation on active lock files.

Co-authored-by: arabianq <55220741+arabianq@users.noreply.github.com>

This commit is contained in:

google-labs-jules[bot]

2026-05-15 21:42:59 +00:00

parent 930857312d

commit d9179514d4

4 changed files with 43 additions and 7 deletions

									
										Cargo.toml
									
		+1
		
												View File
												
				@@ -62,6 +62,7 @@ eframe = { version = "0.34.2", default-features = false, features = [

				egui_extras = "0.34.1"

				egui_material_icons = "0.6.0"

				egui_dnd = "0.15.0"

				libc = "0.2.186"

				[[bin]]

				name = "pwsp-daemon"