privilege.rs

`crates/veilvoice-watch/src/privilege.rs`

veilvoice-watch · 404 lines · read the source here · or on GitHub

What privilege VeilVoice is running with, and what each level can actually see.

Three levels, and the third one this project does not ship

Level::User is VeilVoice as you. Everything the de-identifier does happens here, and nothing about the engine, the container format or the app lock needs any more than this.
Level::Elevated is running as administrator or root. The monitoring features see further: processes belonging to other users, service accounts, and a few registry and system paths that are unreadable otherwise.
Kernel level is not shipped, and not for want of trying. Loading a kernel driver on 64-bit Windows needs an EV code-signing certificate issued to a verified legal entity plus Microsoft's attestation signing; macOS needs an Apple Developer ID and an entitlement granted case by case. Both are identity checks, and this project is published under a pseudonym on purpose. NO_KERNEL says so in the words a front end should show.

This crate does not elevate anything

It reports. It does not re-launch VeilVoice as administrator, install a service, or ask for a password. Those are changes to somebody's machine and they belong to the person whose machine it is: Level::how_to_raise prints the command, and they type it.

That is not caution for its own sake. A privacy tool that silently acquires administrator rights is a privacy tool nobody can reason about, and one that installs a background service without being asked is worse, because a service outlives the window it was started from, and somebody who tried VeilVoice once should not find it still running next month.

Detection is a measurement, and it can fail

There is no am_i_admin() in the standard library and reaching the real answer is FFI on every platform here. So this asks a tool the system already ships, exactly as veilvoice-watch asks the registry, and when the tool cannot be run, the answer is Level::Unknown rather than a guess.

Unknown is not User. Reporting "not elevated" when the truth is "I could not tell" would understate what VeilVoice can see, which sounds like the safe direction and is not: somebody would conclude a feature is unavailable and stop looking at its output.

In plain words

Most of VeilVoice needs no special permissions at all, because changing a voice is something any program can do with your own account.

The parts that watch your machine can see more when VeilVoice is run as an administrator: programs belonging to other accounts, and a few places on the system that are otherwise off limits. This tells you which of those you are currently getting, and how to run it the other way if you want to.

It will not do that for you. Running as administrator, or installing a background service, is a change to your computer and it should be one you made on purpose. And there is a third level, inside the operating system itself, that VeilVoice does not reach and says so rather than implying it does.

WHAT THIS FILE CONTAINS

404 lines defining 8 functions (6 public), 1 type and 3 constants. Everything below is read out of the source, so it cannot disagree with the code.

The types it owns.

enum Level line 67 · What VeilVoice is running with.

What happens when it runs. These are the ways in: public, and nothing else in this file calls them, so they are what an outside caller reaches first.

Level::label line 84 · A short name.
Level::what_it_sees line 99 · What this level can see, and what it cannot.
Level::how_to_raise line 126 · The command that would run VeilVoice at the higher level.
Level::is_full_view line 138 · Whether the monitoring features are seeing everything they could.
level line 146 · What VeilVoice is running with right now.
reaches unix_level, windows_level
service_installed line 238 · Whether a background service is installed.

WHAT CALLS WHAT

The functions this file defines, and the calls between them. An edge means the callee's name appears, called, inside the caller's body. This is a syntactic reading, not a type-resolved one.

The same graph as Mermaid source

%%{init: {"theme":"base","themeVariables":{"background":"#1a1b26","primaryColor":"#1f2335","primaryTextColor":"#c0caf5","primaryBorderColor":"#7aa2f7","secondaryColor":"#16161e","tertiaryColor":"#16161e","lineColor":"#737aa2","textColor":"#c0caf5","mainBkg":"#1f2335","nodeBorder":"#7aa2f7","clusterBkg":"#16161e","clusterBorder":"#2f3549","fontFamily":"ui-monospace, SFMono-Regular, Consolas, monospace","fontSize":"14px"}}}%%
flowchart TD
    n_label(["Level::label<br/>line 84"])
    n_what_it_sees(["Level::what_it_sees<br/>line 99"])
    n_how_to_raise(["Level::how_to_raise<br/>line 126"])
    n_is_full_view(["Level::is_full_view<br/>line 138"])
    n_level(["level<br/>line 146"])
    n_windows_level["windows_level<br/>line 164"]
    n_unix_level["unix_level<br/>line 213"]
    n_service_installed(["service_installed<br/>line 238"])
    n_level --> n_unix_level
    n_level --> n_windows_level
    click n_label href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L84" "open the source"
    click n_what_it_sees href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L99" "open the source"
    click n_how_to_raise href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L126" "open the source"
    click n_is_full_view href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L138" "open the source"
    click n_level href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L146" "open the source"
    click n_windows_level href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L164" "open the source"
    click n_unix_level href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L213" "open the source"
    click n_service_installed href "https://github.com/tilas01/veilvoice/blob/main/crates/veilvoice-watch/src/privilege.rs#L238" "open the source"
    classDef entry fill:#1f2335,stroke:#7aa2f7,color:#c0caf5
    class n_label,n_what_it_sees,n_how_to_raise,n_is_full_view,n_level,n_service_installed entry
    classDef helper fill:#1f2335,stroke:#bb9af7,color:#c0caf5
    class n_windows_level,n_unix_level helper

This site loads no third-party script, so it cannot run Mermaid; the diagram above is the same nodes and edges drawn by the generator instead. GitHub renders the source below directly.

ITEMS

Item	Line	Documentation
`Level` _{pub enum}	67	What VeilVoice is running with.
`Level::label` _{pub fn}	84	A short name.
`Level::what_it_sees` _{pub fn}	99	What this level can see, and what it cannot.
`Level::how_to_raise` _{pub fn}	126	The command that would run VeilVoice at the higher level.
`Level::is_full_view` _{pub fn}	138	Whether the monitoring features are seeing everything they could.
`level` _{pub fn}	146	What VeilVoice is running with right now.
`windows_level` _fn	164	On Windows, ask whoami /groups for the administrators SID.
`unix_level` _fn	213	Everywhere else, ask id -u.
`service_installed` _{pub fn}	238	Whether a background service is installed.
`NO_SERVICE` _{pub const}	243	Why the opt-in service is not shipped, in the words to show.
`NO_KERNEL` _{pub const}	252	What kernel level would need, and why it is not here.
`NEVER_ELEVATES` _{pub const}	263	What this crate will not do, and why that is deliberate.