BastionGuard-secure-cli.cpp

Go to the documentation of this file.

/*
 * BastionGuard™
 * Copyright (C) 2025–2026 Calogero Scarnà
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 * BastionGuard™ is a trademark of Calogero Scarnà.
 * The BastionGuard™ name and branding are not licensed under the GPL.
 */
 
#include "../SafeProcess.hpp"
#include "BastionGuard-secure.hpp"
#include "SecureBrowser.hpp"
#include "dns_secure.hpp"
#include "Resource.hpp"
#include <include/cef_app.h>
#include <glib/gi18n.h>
#include <unistd.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <cerrno>
 
#include <iostream>
#include <fstream>
#include <vector>
#include <cstdlib>
#include <cstring>
#include <string>
 
 
static void configure_graphics_backend() {
    const char* wayland = std::getenv("WAYLAND_DISPLAY");
    const char* x11     = std::getenv("DISPLAY");
 
    if (wayland && *wayland) {
        std::cout << _("[BastionGuard-secure] Sessione Wayland rilevata → backend Wayland.\n");
        setenv("GDK_BACKEND", "wayland", 1);
        setenv("OZONE_PLATFORM", "wayland", 1);
    } else if (x11 && *x11) {
        std::cout << _("[BastionGuard-secure] Sessione X11 rilevata → backend X11.\n");
        setenv("GDK_BACKEND", "x11", 1);
        setenv("OZONE_PLATFORM", "x11", 1);
    } else {
        std::cout << _("[BastionGuard-secure] Nessuna sessione grafica rilevata → fallback X11.\n");
        setenv("GDK_BACKEND", "x11", 1);
        setenv("OZONE_PLATFORM", "x11", 1);
    }
 
    const char* force_sw = std::getenv("BASTIONGUARD_FORCE_SOFTWARE_GL");
    if (force_sw && std::strcmp(force_sw, "1") == 0) {
        std::cout << _("[BastionGuard-secure] Forzo rendering software (LIBGL_ALWAYS_SOFTWARE=1)\n");
        setenv("LIBGL_ALWAYS_SOFTWARE", "1", 1);
    }
}
 
 
static bool has_in_path(const char* exe) {
    return exe && bg_process::exists_on_path(exe);
}
 
 
 
 
int main(int argc, char** argv) {
    setlocale(LC_ALL, "");
    bindtextdomain("BastionGuard", LOCALEDIR);
    bind_textdomain_codeset("BastionGuard", "UTF-8");
    textdomain("BastionGuard");
 
    CefMainArgs cef_args(argc, argv);
    int rc = CefExecuteProcess(cef_args, nullptr, nullptr);
    if (rc >= 0)
        return rc;
 
    const char* no_bwrap = std::getenv("BASTIONGUARD_NO_BWRAP");
    if (!(no_bwrap && std::strcmp(no_bwrap, "1") == 0)) {
        reexec_inside_bwrap_with_custom_dns(argc, argv);
    } else {
        std::cerr << _("[BastionGuard-secure] Bypass dnsmasq disabilitato (BASTIONGUARD_NO_BWRAP=1)\n");
    }
 
    if (argc < 2) {
        std::cerr << _("Usage: BastionGuard-secure <url>\n");
        return 2;
    }
 
    const std::string url = argv[1];
    std::cout << _("[BastionGuard-secure] URL richiesto: ") << url << "\n";
 
 
    configure_graphics_backend();
 
    SecureList::open_if_allowed(url, argc, argv);
 
    return 0;
}