You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util/quarantine/quarantine_darwin.go

58 lines
1.4 KiB
Go

// Copyright (c) 2022 Tailscale Inc & AUTHORS All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.
package quarantine
import (
"fmt"
"os"
"strings"
"time"
"github.com/google/uuid"
"golang.org/x/sys/unix"
)
func setQuarantineAttr(f *os.File) error {
sc, err := f.SyscallConn()
if err != nil {
return err
}
now := time.Now()
// We uppercase the UUID to match what other applications on macOS do
id := strings.ToUpper(uuid.New().String())
// kLSQuarantineTypeOtherDownload; this matches what AirDrop sets when
// receiving a file.
quarantineType := "0001"
// This format is under-documented, but the following links contain a
// reasonably comprehensive overview:
// https://eclecticlight.co/2020/10/29/quarantine-and-the-quarantine-flag/
// https://nixhacker.com/security-protection-in-macos-1/
// https://ilostmynotes.blogspot.com/2012/06/gatekeeper-xprotect-and-quarantine.html
attrData := fmt.Sprintf("%s;%x;%s;%s",
quarantineType, // quarantine value
now.Unix(), // time in hex
"Tailscale", // application
id, // UUID
)
var innerErr error
err = sc.Control(func(fd uintptr) {
innerErr = unix.Fsetxattr(
int(fd),
"com.apple.quarantine", // attr
[]byte(attrData),
0,
)
})
if err != nil {
return err
}
return innerErr
}