feat(agent): lock process memory with mlockall

Author: dbohdan

agent.go

@@ -30,6 +30,10 @@ func (cmd *RestartCmd) Run(config *Config) error {
 		printRepr(cmd)
 	}
 
+	if err := lockMemory(); err != nil {
+		return err
+	}
+
 	_, _ = messageAgent(config.Socket, "SHUTDOWN")
 
 	identitiesText, err := decryptIdentities(config.Identities)
@@ -45,6 +49,10 @@ func (cmd *RunCmd) Run(config *Config) error {
 		printRepr(cmd)
 	}
 
+	if err := lockMemory(); err != nil {
+		return err
+	}
+
 	return runAgent(config.Socket)
 }
 
@@ -53,6 +61,10 @@ func (cmd *StartCmd) Run(config *Config) error {
 		printRepr(cmd)
 	}
 
+	if err := lockMemory(); err != nil {
+		return err
+	}
+
 	if err := pingAgent(config.Socket); err == nil {
 		return fmt.Errorf("found agent responding on socket")
 	}

mlockall.go

@@ -0,0 +1,20 @@
+// pago - a command-line password manager.
+//
+// License: MIT.
+// See the file LICENSE.
+
+package main
+
+import (
+	"fmt"
+
+	"golang.org/x/sys/unix"
+)
+
+func lockMemory() error {
+	if err := unix.Mlockall(unix.MCL_CURRENT | unix.MCL_FUTURE); err != nil {
+		return fmt.Errorf("failed to lock memory: %v", err)
+	}
+
+	return nil
+}