SaneSecurityUpdater Class Reference

#include <SaneSecurityUpdater.hpp>

Static Public Member Functions
static bool	runHeadless ()

Detailed Description

Definition at line 24 of file SaneSecurityUpdater.hpp.

Member Function Documentation

runHeadless()

bool SaneSecurityUpdater::runHeadless ( )

static

Definition at line 48 of file SaneSecurityUpdater.cpp.

                                      {
 
    const std::string tmpDir = "/var/lib/clamav/sanesecurity.tmp";
 
 
    // Fixed working directory and argument-vector execution: no root shell.
    // Keep deletion confined to this directory, never to /var/lib/clamav.
    namespace fs = std::filesystem;
    std::error_code ec;
    fs::remove_all(tmpDir, ec);
    if (ec || !fs::create_directories(tmpDir, ec) || ec) {
        std::cerr << _("Errore: impossibile creare la cartella temporanea") << std::endl;
        return false;
    }
 
    const auto sync = bg_process::run({"rsync", "-av", "--delete", "--",
                     "rsync://rsync.sanesecurity.net/sanesecurity", tmpDir + "/"}, true);
    if (!sync.ok()) {
        std::cerr << _("Errore durante rsync") << std::endl;
        fs::remove_all(tmpDir, ec);
        return false;
    }
 
    // Never evaluate downloaded filenames as shell metacharacters.
    // Copy only extensions that ClamAV/SaneSecurity expects.
    const std::vector<std::string> extensions = {
        ".ndb", ".hdb", ".ldb", ".yar", ".yara", ".ign2", ".txt"
    };
    bool copies_ok = true;
    for (const auto& entry : fs::directory_iterator(tmpDir, ec)) {
        if (ec) { copies_ok = false; break; }
        // Never follow symlinks provided by an external rsync mirror.
        if (entry.is_symlink(ec) || ec) {
            copies_ok = false;
            ec.clear();
            continue;
        }
        if (!entry.is_regular_file(ec) || ec) {
            ec.clear();
            continue;
        }
        const auto extension = entry.path().extension().string();
        if (std::find(extensions.begin(), extensions.end(), extension) == extensions.end()) continue;
        const fs::path destination = fs::path("/var/lib/clamav") / entry.path().filename();
        fs::copy_file(entry.path(), destination, fs::copy_options::overwrite_existing, ec);
        if (ec) {
            copies_ok = false;
            ec.clear();
        }
    }
    fs::remove_all(tmpDir, ec);
    if (!copies_ok) std::cerr << _("Errore copiando i file SaneSecurity") << std::endl;
 
    if (!reload_clamav_service()) {
    std::cerr << _("⚠ Impossibile ricaricare il servizio ClamAV: servizio non trovato") << "\n";
}
 
    return copies_ok;
}

References _, reload_clamav_service(), and bg_process::run().

Referenced by main().

---

The documentation for this class was generated from the following files:

• BastionGuard/src/SaneSecurityUpdater.hpp
• BastionGuard/src/SaneSecurityUpdater.cpp