dnsmasq_backend.hpp

Go to the documentation of this file.

/*
 * BastionGuard™
 * Copyright (C) 2025–2026 Calogero Scarnà
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 * BastionGuard™ is a trademark of Calogero Scarnà.
 * The BastionGuard™ name and branding are not licensed under the GPL.
 */
 
#pragma once
#include <string>
#include <vector>
 
namespace BastionGuard {
class DnsmasqBackend {
public:
    DnsmasqBackend(const std::string& blacklist_path="/etc/dnsmasq.d/BastionGuard-blacklist.conf",
                   const std::string& whitelist_path="/etc/dnsmasq.d/BastionGuard-whitelist.conf",
                   const std::string& dnsmasq_user="dnsmasq");
 
    // Add/Remove domains (not full URLs). Domains should be sanitized.
    bool add_to_blacklist(const std::string& domain);
    bool remove_from_blacklist(const std::string& domain);
    bool add_to_whitelist(const std::string& domain);
    bool remove_from_whitelist(const std::string& domain);
 
    // Replace entire list (atomic)
    bool write_blacklist(const std::vector<std::string>& domains);
    bool write_whitelist(const std::vector<std::string>& domains);
 
    bool reload_dnsmasq();
 
private:
    std::string blacklist_path_;
    std::string whitelist_path_;
    std::string dnsmasq_user_;
 
    bool atomic_write(const std::string& path, const std::string& content);
    std::string make_dnsmasq_entries(const std::vector<std::string>& domains);
};
}