feat: lock process memory with mlockall

Author: dbohdan

main.go

@@ -888,6 +888,10 @@ func waitUntilAvailable(path string, maximum time.Duration) error {
 }
 
 func main() {
+	if err := lockMemory(); err != nil {
+		exitWithError("%v", err)
+	}
+
 	globalConfig, err := gitConfig.LoadConfig(gitConfig.GlobalScope)
 	if err == nil {
 		defaultGitEmail = globalConfig.User.Email

mlockall.go

@@ -0,0 +1,20 @@
+// pago - a command-line password manager.
+//
+// License: MIT.
+// See the file LICENSE.
+
+package main
+
+import (
+	"fmt"
+
+	"golang.org/x/sys/unix"
+)
+
+func lockMemory() error {
+	if err := unix.Mlockall(unix.MCL_CURRENT | unix.MCL_FUTURE); err != nil {
+		return fmt.Errorf("failed to lock memory: %v", err)
+	}
+
+	return nil
+}