AutomaticResponseSink.hpp

Go to the documentation of this file.

#pragma once
 
#include "rootguard/IEventSink.hpp"
 
#include <atomic>
#include <condition_variable>
#include <deque>
#include <filesystem>
#include <mutex>
#include <set>
#include <string>
#include <thread>
 
namespace bastionguard::rootguard {
 
class AutomaticResponseSink final : public IEventSink {
public:
    explicit AutomaticResponseSink(IEventSink& downstream,
                                   bool autoBlockSystemServices);
    ~AutomaticResponseSink() override;
 
    AutomaticResponseSink(const AutomaticResponseSink&) = delete;
    AutomaticResponseSink& operator=(const AutomaticResponseSink&) = delete;
 
    void onEvent(const rg_event& event) noexcept override;
    void setAutoBlockSystemServices(bool enabled) noexcept;
 
private:
    void workerLoop() noexcept;
    void enqueueService(const std::filesystem::path& path,
                        const rg_event& source) noexcept;
    void emitServiceResult(const std::filesystem::path& path,
                           const rg_event& source,
                           bool success) noexcept;
 
    struct PendingService {
        std::filesystem::path path;
        rg_event source{};
    };
 
    IEventSink& downstream_;
    std::atomic<bool> autoBlockSystemServices_{true};
    std::mutex mutex_;
    std::condition_variable condition_;
    std::deque<PendingService> queue_;
    std::set<std::string> queuedPaths_;
    bool stopping_{};
    std::thread worker_;
};
 
} // namespace bastionguard::rootguard