vpnchecker 0.1.0

VPN kill switch for macOS: outbound traffic leaves only through the VPN (pf), with a wildcard domain allowlist
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

use tokio::process::Command;
use tracing::debug;

use crate::sys;

/// Shows a macOS notification in the GUI session of `uid` (needed when running as root).
pub fn send(uid: Option<u32>, message: &str) {
    let script = [
        "-e",
        "on run argv",
        "-e",
        "display notification (item 1 of argv) with title \"vpnchecker\"",
        "-e",
        "end run",
        message,
    ];
    let mut cmd = if sys::is_root() {
        let Some(uid) = uid.filter(|&u| u != 0) else {
            return;
        };
        let mut cmd = Command::new("/bin/launchctl");
        cmd.args(["asuser", &uid.to_string(), "/usr/bin/sudo", "-u", &format!("#{uid}"), "/usr/bin/osascript"]);
        cmd
    } else {
        Command::new("/usr/bin/osascript")
    };
    cmd.args(script).kill_on_drop(false);
    if let Err(e) = cmd.spawn() {
        debug!(error = %e, "notification failed");
    }
}