first-run-services-window.cpp File Reference

Go to the source code of this file.

Namespaces
namespace	anonymous_namespace{first-run-services-window.cpp}

Functions
static bool	anonymous_namespace{first-run-services-window.cpp}::is_system_unit (const std::string &unit_name)
static bool	anonymous_namespace{first-run-services-window.cpp}::run_cmd (const std::vector< std::string > &argv, bool silence_stderr=true, bool capture_stdout=false, std::string *out_stdout=nullptr)
static bool	anonymous_namespace{first-run-services-window.cpp}::pkexec_servicectl (const std::vector< std::string > &args, bool silence_stderr=false)
static std::string	anonymous_namespace{first-run-services-window.cpp}::get_user_intercept_ca_path ()
static std::string	anonymous_namespace{first-run-services-window.cpp}::get_system_fallback_ca_path ()
static std::string	anonymous_namespace{first-run-services-window.cpp}::resolve_ca_path ()
static void	ensure_config_dir ()
static void	ensure_flag_dir ()
static void	touch_flag_file ()
static void	save_config (const std::vector< std::string > &service_names, const std::vector< Gtk::CheckButton * > &check_buttons)
static void	install_ca_system ()
static void	install_ca_nss_user ()

Variables
const std::string	anonymous_namespace{first-run-services-window.cpp}::FLAG_DIR = Glib::get_user_config_dir() + "/BastionGuard"
const std::string	anonymous_namespace{first-run-services-window.cpp}::FLAG_FILE = FLAG_DIR + "/first-run-services-done"
const std::string	anonymous_namespace{first-run-services-window.cpp}::CONFIG_DIR = Glib::get_user_config_dir() + "/BastionGuard"
const std::string	anonymous_namespace{first-run-services-window.cpp}::CONFIG_FILE = CONFIG_DIR + "/config.json"
const std::set< std::string >	anonymous_namespace{first-run-services-window.cpp}::SYSTEM_UNITS
static constexpr const char *	anonymous_namespace{first-run-services-window.cpp}::CA_HELPER

Function Documentation

ensure_config_dir()

void ensure_config_dir ( )

static

Definition at line 143 of file first-run-services-window.cpp.

{
    Glib::RefPtr<Gio::File> dir = Gio::File::create_for_path(CONFIG_DIR);
 
    if (!dir->query_exists())
    {
        try
        {
            dir->make_directory_with_parents();
        }
        catch (const Glib::Error& ex)
        {
            std::cerr << _("Impossibile creare directory config: ") << ex.what() << std::endl;
        }
    }
}

References _, anonymous_namespace{first-run-services-window.cpp}::CONFIG_DIR, and ensure_config_dir().

Referenced by ensure_config_dir(), and save_config().

ensure_flag_dir()

void ensure_flag_dir ( )

static

Definition at line 160 of file first-run-services-window.cpp.

{
    Glib::RefPtr<Gio::File> dir = Gio::File::create_for_path(FLAG_DIR);
 
    if (!dir->query_exists())
    {
        try
        {
            dir->make_directory_with_parents();
        }
        catch (const Glib::Error& ex)
        {
            std::cerr << _("Impossibile creare directory flag: ") << ex.what() << std::endl;
        }
    }
}

References _, ensure_flag_dir(), and anonymous_namespace{first-run-services-window.cpp}::FLAG_DIR.

Referenced by ensure_flag_dir(), and touch_flag_file().

install_ca_nss_user()

void install_ca_nss_user ( )

static

Definition at line 500 of file first-run-services-window.cpp.

{
    if (!BastionGuard::Platform::cef_available()) {
        return;
    }
    const std::string ca_src = resolve_ca_path();
    if (ca_src.empty()) {
        std::cerr << _("[FirstRun] CA NSS utente non trovata\n");
        return;
    }
 
    auto nss_add = [&](const std::string& db) {
        if (!std::filesystem::exists(db))
            return;
 
        const std::string prefix =
            std::filesystem::exists(db + "/cert9.db") ? "sql:" : "dbm:";
 
        run_cmd({"certutil", "-D", "-d", prefix + db, "-n", "BastionGuard-CA"}, true);
 
        bool ok = run_cmd({"certutil", "-A",
            "-d", prefix + db,
            "-n", "BastionGuard-CA",
            "-t", "CT,,",
            "-i", ca_src}, false);
 
        if (ok)
            std::cerr << _("[FirstRun] ✅ NSS: ") << db << "\n";
    };
 
    const std::string home = Glib::get_home_dir();
 
 
    for (const auto& db : std::vector<std::string>{
            home + "/.pki/nssdb",
            home + "/snap/chromium/current/.pki/nssdb",
            home + "/.var/app/org.chromium.Chromium/.pki/nssdb",
            home + "/.var/app/com.google.Chrome/.pki/nssdb",
            home + "/.var/app/com.brave.Browser/.pki/nssdb",
            home + "/.var/app/com.microsoft.Edge/.pki/nssdb",
            home + "/.var/app/com.opera.Opera/.pki/nssdb",
            home + "/.var/app/com.vivaldi.Vivaldi/.pki/nssdb",
            home + "/.config/BraveSoftware/Brave-Browser/Default",
            home + "/.config/microsoft-edge/Default",
            home + "/.config/opera",
            home + "/.config/vivaldi/Default",
            home + "/.config/chromium/Default",
            home + "/.config/yandex-browser/Default",
    }) {
        nss_add(db);
    }
 
    auto is_profile = [](const std::string& n) {
        for (const auto& s : {
                 ".default",
                 ".default-release",
                 ".default-esr",
                 ".dev-edition-default",
                 "-release",
                 "-esr"
             }) {
            if (n.size() >= std::string(s).size() &&
                n.compare(n.size() - std::string(s).size(), std::string(s).size(), s) == 0)
                return true;
        }
        return n.size() > 9 && n[8] == '.';
    };
 
    for (const auto& base : std::vector<std::string>{
            home + "/.mozilla/firefox",
            home + "/.var/app/org.mozilla.firefox/.mozilla/firefox",
            home + "/.var/app/org.mozilla.firefoxesr/.mozilla/firefox",
            home + "/snap/firefox/current/.mozilla/firefox",
            home + "/.librewolf",
            home + "/.var/app/io.gitlab.librewolf-community/.librewolf",
            home + "/.waterfox",
            home + "/.floorp",
            home + "/.var/app/one.ablaze.floorp/.floorp",
            home + "/.zen",
            home + "/.var/app/io.github.zen_browser.zen/.zen",
            home + "/.icecat",
            home + "/.thunderbird",
            home + "/.var/app/org.mozilla.Thunderbird/.thunderbird",
            home + "/snap/thunderbird/current/.thunderbird",
    }) {
        if (!std::filesystem::exists(base))
            continue;
 
        try {
            for (const auto& e : std::filesystem::directory_iterator(base)) {
                if (e.is_directory() && is_profile(e.path().filename().string()))
                    nss_add(e.path().string());
            }
        } catch (...) {}
    }
 
    std::cerr << _("[FirstRun] ✅ NSS profili utente aggiornati\n");
}

References _, BastionGuard::Platform::cef_available(), install_ca_nss_user(), anonymous_namespace{first-run-services-window.cpp}::resolve_ca_path(), and anonymous_namespace{first-run-services-window.cpp}::run_cmd().

Referenced by FirstRunServicesWindow::apply_and_close(), and install_ca_nss_user().

install_ca_system()

void install_ca_system ( )

static

Definition at line 462 of file first-run-services-window.cpp.

{
    if (!BastionGuard::Platform::cef_available()) {
        std::cerr << _("[FirstRun] CA di sistema disabilitata: CEF non disponibile in questa build/distribuzione.\n");
        return;
    }
    const std::string ca_src = resolve_ca_path();
 
    if (ca_src.empty()) {
        std::cerr << _("[FirstRun] CA non trovata né nella home utente né in /etc, verrà installata al primo avvio CEF\n");
        return;
    }
 
    if (!std::filesystem::exists(CA_HELPER)) {
        std::cerr << _("[FirstRun] helper non trovato: ") << CA_HELPER << "\n";
        return;
    }
 
    std::cerr << _("[FirstRun] Installazione CA BastionGuard nel trust store...\n");
    std::cerr << _("[FirstRun] Uso certificato: ") << ca_src << "\n";
 
    bool ok = run_cmd({"pkexec", CA_HELPER, ca_src}, false);
    if (!ok) {
        std::cerr << _("[FirstRun] ⚠️  pkexec fallito, tentativo sudo...\n");
        ok = run_cmd({"sudo", "--non-interactive", CA_HELPER, ca_src}, false);
    }
 
    if (ok) {
        std::cerr << _("[FirstRun] ✅ CA installata nel sistema\n");
    } else {
        std::cerr << _("[FirstRun] ❌ Installazione CA fallita — verrà ritentata al primo avvio CEF\n");
        try {
            std::filesystem::remove(
                Glib::get_user_data_dir() + "/BastionGuard/ca-installed.stamp");
        } catch (...) {}
    }
}

References _, anonymous_namespace{first-run-services-window.cpp}::CA_HELPER, BastionGuard::Platform::cef_available(), install_ca_system(), anonymous_namespace{first-run-services-window.cpp}::resolve_ca_path(), and anonymous_namespace{first-run-services-window.cpp}::run_cmd().

Referenced by FirstRunServicesWindow::apply_and_close(), and install_ca_system().

save_config()

void save_config ( const std::vector< std::string > & service_names, const std::vector< Gtk::CheckButton * > & check_buttons )

static

Definition at line 192 of file first-run-services-window.cpp.

{
    ensure_config_dir();
 
    json config;
    config["wizard_completed"] = true;
 
    Glib::DateTime now = Glib::DateTime::create_now_utc();
    config["installed_at"] = now.format("%FT%TZ");
 
    json services = json::object();
    for (size_t i = 0; i < service_names.size(); ++i)
    {
        services[service_names[i]] = check_buttons[i]->get_active();
    }
    config["services"] = services;
 
    try
    {
        std::ofstream file(CONFIG_FILE, std::ios::out | std::ios::trunc);
        if (file.is_open())
        {
            file << config.dump(2);
            file.close();
        }
        else
        {
            std::cerr << _("Errore: impossibile aprire config.json per scrittura") << std::endl;
        }
    }
    catch (const std::exception& ex)
    {
        std::cerr << _("Errore durante il salvataggio config: ") << ex.what() << std::endl;
    }
}

References _, anonymous_namespace{first-run-services-window.cpp}::CONFIG_FILE, ensure_config_dir(), and save_config().

Referenced by FirstRunServicesWindow::apply_and_close(), and save_config().

touch_flag_file()

void touch_flag_file ( )

static

Definition at line 177 of file first-run-services-window.cpp.

{
    ensure_flag_dir();
 
    try
    {
        std::ofstream touch(FLAG_FILE, std::ios::out | std::ios::trunc);
        touch.close();
    }
    catch (const std::exception& ex)
    {
        std::cerr << _("Errore durante scrittura flag file: ") << ex.what() << std::endl;
    }
}

References _, ensure_flag_dir(), anonymous_namespace{first-run-services-window.cpp}::FLAG_FILE, and touch_flag_file().

Referenced by FirstRunServicesWindow::maybe_show(), and touch_flag_file().