dc9e74ca12
All checks were successful
Check / eval-and-lint (push) Successful in 6m57s
Ten state-mutating sites across seven scripts wrote through a predictable, world-writable temp path (`/tmp/state.json`, `/tmp/system-state.json`) before the atomic `sudo mv`. Because the `>` redirect runs as the invoking user (sudo doesn't cover redirects), the shared fixed path is a symlink/ TOCTOU target and collides if two of these run concurrently. Switch each to a per-invocation `mktemp`; the atomic rename into place is unchanged. nomarchy-theme-set already used a temp var for its home-state write — this makes its system-state write consistent and cleans the temp up on failure. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
27 lines
858 B
Bash
Executable File
27 lines
858 B
Bash
Executable File
#!/usr/bin/env bash
|
|
set -e
|
|
|
|
# Configure fingerprint support declaratively for Nomarchy NixOS.
|
|
|
|
STATE_FILE="/etc/nixos/state.json"
|
|
|
|
if [[ "--remove" == $1 ]]; then
|
|
tmp=$(mktemp); sudo jq '.features.fingerprint = false' "$STATE_FILE" > "$tmp" && sudo mv "$tmp" "$STATE_FILE"
|
|
echo "Fingerprint support disabled. Applying changes..."
|
|
sudo nomarchy-sys-update
|
|
exit 0
|
|
fi
|
|
|
|
tmp=$(mktemp); sudo jq '.features.fingerprint = true' "$STATE_FILE" > "$tmp" && sudo mv "$tmp" "$STATE_FILE"
|
|
echo "Fingerprint support enabled. Applying changes..."
|
|
sudo nomarchy-sys-update
|
|
|
|
# Enrollment is still an imperative action
|
|
if command -v fprintd-enroll &> /dev/null; then
|
|
echo "Let's enroll your fingerprint now."
|
|
fprintd-enroll
|
|
echo "Fingerprint enrolled."
|
|
else
|
|
echo "fprintd not found. It will be available after the next reboot or sys-update."
|
|
fi
|