BrowserProxy Namespace Reference

Classes
struct	Settings

Functions
static std::string	home_dir ()
static void	write_file (const fs::path &p, const std::string &content)
static void	remove_lines_containing (const fs::path &p, const std::string &needle)
static fs::path	firefox_active_profile (const fs::path &profiles_dir)
static void	firefox_set_profile (const fs::path &profile, const Settings &s)
static void	firefox_clear_profile (const fs::path &profile)
static void	configure_firefox_family (const Settings &s, bool clear)
static std::string	make_chromium_policy (const Settings &s)
static void	chromium_set_policy (const fs::path &dir, const Settings &s)
static void	chromium_clear_policy (const fs::path &dir)
static void	configure_chromium_family (const Settings &s, bool clear)
static bool	nss_contains_ca (const std::string &database)
static void	install_ca_firefox_profile (const fs::path &profile)
static void	install_ca_firefox_family ()
static void	install_ca_nssdb ()
static void	install_ca_all_browsers ()
static void	apply (const Settings &s)
static void	restore ()

Variables
static constexpr const char *	LAN_BYPASS_CIDR
static constexpr const char *	LAN_BYPASS_NOCIDR
static constexpr const char *	LAN_BYPASS_GVARIANT
static constexpr const char *	FF_MARKER = "// BastionGuard-proxy"
static constexpr const char *	BG_CA_CERT = "/etc/BastionGuard/certs/BastionGuard-ca.crt.pem"
static constexpr const char *	BG_CA_NICK = "BastionGuard-CA"

Function Documentation

apply()

void BrowserProxy::apply ( const Settings & s )

static

Definition at line 375 of file proxy_config.hpp.

                                     {
    std::cerr << _("[browser-proxy] configuring browsers\n");
    configure_firefox_family(s, false);
    configure_chromium_family(s, false);
}

References _, apply(), configure_chromium_family(), and configure_firefox_family().

Referenced by apply(), and ProxyConfig::apply().

chromium_clear_policy()

void BrowserProxy::chromium_clear_policy ( const fs::path & dir )

static

Definition at line 275 of file proxy_config.hpp.

                                                     {
    std::error_code ec;
    fs::remove(dir / "bastionguard_proxy.json", ec);
}

References chromium_clear_policy().

Referenced by chromium_clear_policy(), and configure_chromium_family().

chromium_set_policy()

void BrowserProxy::chromium_set_policy ( const fs::path & dir, const Settings & s )

static

Definition at line 262 of file proxy_config.hpp.

                                                                      {
    std::error_code ec;
    fs::create_directories(dir, ec);
    if (ec) return;
 
    write_file(dir / "bastionguard_proxy.json", make_chromium_policy(s));
 
    char buf[256];
    std::snprintf(buf, sizeof(buf),
        _("[browser-proxy] Chromium policy written: %s\n"), dir.c_str());
    std::cerr << buf;
}

References _, chromium_set_policy(), make_chromium_policy(), and write_file().

Referenced by chromium_set_policy(), and configure_chromium_family().

configure_chromium_family()

void BrowserProxy::configure_chromium_family ( const Settings & s, bool clear )

static

Definition at line 280 of file proxy_config.hpp.

                                                                     {
    const std::string home = home_dir();
    if (home.empty()) return;
 
    const std::vector<fs::path> dirs = {
        fs::path(home) / ".config/chromium/policies/managed",
        fs::path(home) / ".config/google-chrome/policies/managed",
        fs::path(home) / ".config/BraveSoftware/Brave-Browser/policies/managed",
        fs::path(home) / ".config/microsoft-edge/policies/managed",
        fs::path(home) / ".config/vivaldi/policies/managed",
        fs::path(home) / ".config/opera/policies/managed",
        fs::path(home) / ".var/app/org.chromium.Chromium/config/chromium/policies/managed",
        fs::path(home) / ".var/app/com.google.Chrome/config/google-chrome/policies/managed",
        fs::path(home) / ".var/app/com.brave.Browser/config/BraveSoftware/Brave-Browser/policies/managed",
        fs::path(home) / "snap/chromium/current/.config/chromium/policies/managed",
    };
 
    for (const auto& dir : dirs) {
        if (clear) {
            chromium_clear_policy(dir);
        } else {
            if (fs::exists(dir.parent_path().parent_path()))
                chromium_set_policy(dir, s);
        }
    }
}

References chromium_clear_policy(), chromium_set_policy(), configure_chromium_family(), and home_dir().

Referenced by apply(), configure_chromium_family(), and restore().

configure_firefox_family()

void BrowserProxy::configure_firefox_family ( const Settings & s, bool clear )

static

Definition at line 232 of file proxy_config.hpp.

                                                                    {
    const std::string home = home_dir();
    if (home.empty()) return;
 
    const std::vector<fs::path> roots = {
        fs::path(home) / ".mozilla/firefox",
        fs::path(home) / ".librewolf",
        fs::path(home) / ".waterfox",
        fs::path(home) / "snap/firefox/common/.mozilla/firefox",
        fs::path(home) / ".var/app/org.mozilla.firefox/.mozilla/firefox",
        fs::path(home) / ".var/app/io.gitlab.librewolf-community/.librewolf",
    };
 
    for (const auto& root : roots) {
        if (!fs::exists(root)) continue;
        const fs::path profile = firefox_active_profile(root);
        if (profile.empty()) continue;
        if (clear) firefox_clear_profile(profile);
        else       firefox_set_profile(profile, s);
    }
}

References configure_firefox_family(), firefox_active_profile(), firefox_clear_profile(), firefox_set_profile(), and home_dir().

Referenced by apply(), configure_firefox_family(), and restore().

firefox_active_profile()

fs::path BrowserProxy::firefox_active_profile ( const fs::path & profiles_dir )

static

Definition at line 128 of file proxy_config.hpp.

                                                                 {
 
    const fs::path ini = profiles_dir / "profiles.ini";
    if (!fs::exists(ini)) return {};
 
    struct Profile {
        std::string path;
        bool        is_relative = true;
        bool        is_default  = false;
    };
 
    std::vector<Profile> profiles;
    std::string          install_default;
    bool                 in_install = false;
    bool                 in_profile = false;
 
    std::ifstream f(ini);
    std::string line;
 
    while (std::getline(f, line)) {
        line.erase(0, line.find_first_not_of(" \t\r\n"));
        if (!line.empty()) line.erase(line.find_last_not_of(" \t\r\n") + 1);
        if (line.empty() || line[0] == ';') continue;
 
        if (line[0] == '[') {
            in_install = (line.rfind("[Install", 0) == 0);
            in_profile = (line.rfind("[Profile", 0) == 0);
            if (in_profile) profiles.push_back({});
        } else if (in_install) {
            if (line.rfind("Default=", 0) == 0)
                install_default = line.substr(8);
        } else if (in_profile && !profiles.empty()) {
            auto& p = profiles.back();
            if (line.rfind("Default=1", 0) == 0)         p.is_default  = true;
            else if (line.rfind("Path=", 0) == 0)        p.path        = line.substr(5);
            else if (line.rfind("IsRelative=0", 0) == 0) p.is_relative = false;
        }
    }
    if (!install_default.empty()) {
        for (const auto& p : profiles) {
            if (p.path == install_default) {
                fs::path full = p.is_relative
                    ? profiles_dir / p.path
                    : fs::path(p.path);
                if (fs::exists(full)) return full;
            }
        }
 
        fs::path full = profiles_dir / install_default;
        if (fs::exists(full)) return full;
    }
    for (const auto& p : profiles) {
        if (!p.path.empty() && p.path.find("default-release") != std::string::npos) {
            fs::path full = p.is_relative ? profiles_dir / p.path : fs::path(p.path);
            if (fs::exists(full)) return full;
        }
    }
 
    for (const auto& p : profiles) {
        if (p.is_default && !p.path.empty()) {
            fs::path full = p.is_relative ? profiles_dir / p.path : fs::path(p.path);
            if (fs::exists(full)) return full;
        }
    }
 
    std::error_code ec;
    for (auto& e : fs::directory_iterator(profiles_dir, ec))
        if (e.is_directory() && e.path().filename().string().find('.') != std::string::npos)
            return e.path();
 
    return {};
}

References firefox_active_profile().

Referenced by configure_firefox_family(), firefox_active_profile(), and install_ca_firefox_family().

firefox_clear_profile()

void BrowserProxy::firefox_clear_profile ( const fs::path & profile )

static

Definition at line 227 of file proxy_config.hpp.

                                                         {
    if (profile.empty()) return;
    remove_lines_containing(profile / "user.js", FF_MARKER);
}

References FF_MARKER, firefox_clear_profile(), and remove_lines_containing().

Referenced by configure_firefox_family(), and firefox_clear_profile().

firefox_set_profile()

void BrowserProxy::firefox_set_profile ( const fs::path & profile, const Settings & s )

static

Definition at line 201 of file proxy_config.hpp.

                                                                          {
    if (profile.empty() || !fs::exists(profile)) return;
 
    const fs::path user_js = profile / "user.js";
    remove_lines_containing(user_js, FF_MARKER);
 
    std::ofstream f(user_js, std::ios::app);
    if (!f) return;
 
    f << "\n" << FF_MARKER << "\n"
      << "user_pref(\"network.proxy.type\", 1); " << FF_MARKER << "\n"
      << "user_pref(\"network.proxy.http\", \"" << s.host << "\"); " << FF_MARKER << "\n"
      << "user_pref(\"network.proxy.http_port\", " << s.port << "); " << FF_MARKER << "\n"
      << "user_pref(\"network.proxy.ssl\", \"" << s.host << "\"); " << FF_MARKER << "\n"
      << "user_pref(\"network.proxy.ssl_port\", " << s.port << "); " << FF_MARKER << "\n"
      << "user_pref(\"network.proxy.no_proxies_on\", \"" << LAN_BYPASS_CIDR << "\"); " << FF_MARKER << "\n"
      // Importante: Firefox di default proxy-a anche le risoluzioni DNS, e
      // questo rompe Avahi/mDNS. Forziamo le LAN a NON essere proxate.
      << "user_pref(\"network.proxy.allow_hijacking_localhost\", false); " << FF_MARKER << "\n";
 
    char buf[256];
    std::snprintf(buf, sizeof(buf),
        _("[browser-proxy] Firefox profile configured: %s\n"), profile.c_str());
    std::cerr << buf;
}

References _, FF_MARKER, firefox_set_profile(), BrowserProxy::Settings::host, LAN_BYPASS_CIDR, BrowserProxy::Settings::port, and remove_lines_containing().

Referenced by configure_firefox_family(), and firefox_set_profile().

home_dir()

std::string BrowserProxy::home_dir ( )

static

Definition at line 104 of file proxy_config.hpp.

                            {
    const char* h = std::getenv("HOME");
    return h ? h : "";
}

References home_dir().

Referenced by configure_chromium_family(), configure_firefox_family(), home_dir(), install_ca_firefox_family(), and install_ca_nssdb().

install_ca_all_browsers()

void BrowserProxy::install_ca_all_browsers ( )

static

Definition at line 364 of file proxy_config.hpp.

                                      {
    if (!fs::exists(BG_CA_CERT)) {
        std::cerr << _("[ca-install] CA cert not found, skipping\n");
        return;
    }
 
    std::cerr << _("[ca-install] installing BastionGuard CA in browsers\n");
    install_ca_firefox_family();
    install_ca_nssdb();
}

References _, BG_CA_CERT, install_ca_all_browsers(), install_ca_firefox_family(), and install_ca_nssdb().

Referenced by ProxyConfig::apply(), and install_ca_all_browsers().

install_ca_firefox_family()

void BrowserProxy::install_ca_firefox_family ( )

static

Definition at line 323 of file proxy_config.hpp.

                                        {
    const std::string home = home_dir();
    if (home.empty()) return;
 
    const std::vector<fs::path> roots = {
        fs::path(home) / ".mozilla/firefox",
        fs::path(home) / ".librewolf",
        fs::path(home) / ".waterfox",
        fs::path(home) / "snap/firefox/common/.mozilla/firefox",
        fs::path(home) / ".var/app/org.mozilla.firefox/.mozilla/firefox",
        fs::path(home) / ".var/app/io.gitlab.librewolf-community/.librewolf",
    };
 
    for (const auto& root : roots) {
        if (!fs::exists(root)) continue;
        const fs::path profile = firefox_active_profile(root);
        if (!profile.empty())
            install_ca_firefox_profile(profile);
    }
}

References firefox_active_profile(), home_dir(), install_ca_firefox_family(), and install_ca_firefox_profile().

Referenced by install_ca_all_browsers(), and install_ca_firefox_family().

install_ca_firefox_profile()

void BrowserProxy::install_ca_firefox_profile ( const fs::path & profile )

static

Definition at line 316 of file proxy_config.hpp.

                                                              {
    if (profile.empty() || !fs::exists(profile) || !fs::exists(BG_CA_CERT)) return;
    if (nss_contains_ca(profile.string())) return;
    (void)bg_process::run({"certutil", "-A", "-d", profile.string(),
                           "-n", BG_CA_NICK, "-t", "CT,C,C", "-i", BG_CA_CERT});
}

References BG_CA_CERT, BG_CA_NICK, install_ca_firefox_profile(), nss_contains_ca(), and bg_process::run().

Referenced by install_ca_firefox_family(), and install_ca_firefox_profile().

install_ca_nssdb()

void BrowserProxy::install_ca_nssdb ( )

static

Definition at line 344 of file proxy_config.hpp.

                               {
    if (!fs::exists(BG_CA_CERT)) return;
    const std::string home = home_dir();
    if (home.empty()) return;
 
    const fs::path nssdb = fs::path(home) / ".pki/nssdb";
    if (!fs::exists(nssdb)) {
        std::error_code ec;
        fs::create_directories(nssdb, ec);
        if (!ec) (void)bg_process::run({"certutil", "-N", "--empty-password", "-d", nssdb.string()});
    }
    for (const fs::path& database : {nssdb,
                      fs::path(home) / "snap/chromium/current/.pki/nssdb"}) {
        if (fs::exists(database) && !nss_contains_ca(database.string())) {
            (void)bg_process::run({"certutil", "-A", "-d", database.string(),
                                   "-n", BG_CA_NICK, "-t", "CT,C,C", "-i", BG_CA_CERT});
        }
    }
}

References BG_CA_CERT, BG_CA_NICK, home_dir(), install_ca_nssdb(), nss_contains_ca(), and bg_process::run().

Referenced by install_ca_all_browsers(), and install_ca_nssdb().

make_chromium_policy()

std::string BrowserProxy::make_chromium_policy ( const Settings & s )

static

Definition at line 254 of file proxy_config.hpp.

                                                         {
    return "{\n"
           "  \"ProxyMode\": \"fixed_servers\",\n"
           "  \"ProxyServer\": \"http://" + s.host + ":" + std::to_string(s.port) + "\",\n"
           "  \"ProxyBypassList\": \"<-loopback>," + std::string(LAN_BYPASS_CIDR) + "\"\n"
           "}\n";
}

References BrowserProxy::Settings::host, LAN_BYPASS_CIDR, make_chromium_policy(), and BrowserProxy::Settings::port.

Referenced by chromium_set_policy(), and make_chromium_policy().

nss_contains_ca()

bool BrowserProxy::nss_contains_ca ( const std::string & database )

static

Definition at line 311 of file proxy_config.hpp.

                                                       {
    const auto list = bg_process::run({"certutil", "-L", "-d", database});
    return list.ok() && list.output.find(BG_CA_NICK) != std::string::npos;
}

References BG_CA_NICK, nss_contains_ca(), bg_process::Result::ok(), and bg_process::run().

Referenced by install_ca_firefox_profile(), install_ca_nssdb(), and nss_contains_ca().

remove_lines_containing()

void BrowserProxy::remove_lines_containing ( const fs::path & p, const std::string & needle )

static

Definition at line 114 of file proxy_config.hpp.

                                                                              {
    if (!fs::exists(p)) return;
    std::ifstream in(p);
    std::ostringstream out;
    std::string line;
    while (std::getline(in, line))
        if (line.find(needle) == std::string::npos)
            out << line << "\n";
    in.close();
    write_file(p, out.str());
}

References remove_lines_containing(), and write_file().

Referenced by firefox_clear_profile(), firefox_set_profile(), and remove_lines_containing().

restore()

void BrowserProxy::restore ( )

static

Definition at line 381 of file proxy_config.hpp.

                      {
    std::cerr << _("[browser-proxy] restoring browser proxy settings\n");
    configure_firefox_family({}, true);
    configure_chromium_family({}, true);
}

References _, configure_chromium_family(), configure_firefox_family(), and restore().

Referenced by restore(), and ProxyConfig::restore().

write_file()

void BrowserProxy::write_file ( const fs::path & p, const std::string & content )

static

Definition at line 109 of file proxy_config.hpp.

                                                                  {
    std::ofstream f(p);
    if (f) f << content;
}

References write_file().

Referenced by chromium_set_policy(), remove_lines_containing(), and write_file().

Variable Documentation

BG_CA_CERT

const char* BrowserProxy::BG_CA_CERT = "/etc/BastionGuard/certs/BastionGuard-ca.crt.pem"

staticconstexpr

Definition at line 307 of file proxy_config.hpp.

Referenced by install_ca_all_browsers(), install_ca_firefox_profile(), and install_ca_nssdb().

BG_CA_NICK

const char* BrowserProxy::BG_CA_NICK = "BastionGuard-CA"

staticconstexpr

Definition at line 308 of file proxy_config.hpp.

Referenced by install_ca_firefox_profile(), install_ca_nssdb(), and nss_contains_ca().

FF_MARKER

const char* BrowserProxy::FF_MARKER = "// BastionGuard-proxy"

staticconstexpr

Definition at line 126 of file proxy_config.hpp.

Referenced by firefox_clear_profile(), and firefox_set_profile().

LAN_BYPASS_CIDR

const char* BrowserProxy::LAN_BYPASS_CIDR

staticconstexpr

Initial value:

                                        =
"localhost,"
"127.0.0.0/8,"
"10.0.0.0/8,"
"172.16.0.0/12,"
"192.168.0.0/16,"
"169.254.0.0/16,"
"100.64.0.0/10,"
"::1,"
"fe80::/10,"
"fc00::/7,"
"*.local,*.lan,*.intranet,*.internal,*.home.arpa,*.corp,*.private"

Definition at line 64 of file proxy_config.hpp.

Referenced by firefox_set_profile(), ProxyConfig::kde_set(), and make_chromium_policy().

LAN_BYPASS_GVARIANT

const char* BrowserProxy::LAN_BYPASS_GVARIANT

staticconstexpr

Initial value:

                                            =
"['localhost',"
"'127.0.0.0/8',"
"'10.0.0.0/8',"
"'172.16.0.0/12',"
"'192.168.0.0/16',"
"'169.254.0.0/16',"
"'100.64.0.0/10',"
"'::1','fe80::/10','fc00::/7',"
"'*.local','*.lan','*.intranet','*.internal','*.home.arpa']"

Definition at line 93 of file proxy_config.hpp.

Referenced by ProxyConfig::gnome_set(), ProxyConfig::mate_set(), and ProxyConfig::xfce_set().

LAN_BYPASS_NOCIDR

const char* BrowserProxy::LAN_BYPASS_NOCIDR

staticconstexpr

Initial value:

                                          =
"localhost,"
"127.0.0.1,"
"::1,"
"10.,"
"192.168.,"
"172.16.,172.17.,172.18.,172.19.,"
"172.20.,172.21.,172.22.,172.23.,"
"172.24.,172.25.,172.26.,172.27.,"
"172.28.,172.29.,172.30.,172.31.,"
"169.254.,"
".local,.lan,.intranet,.internal,.home.arpa,.corp,.private"

Definition at line 79 of file proxy_config.hpp.

Referenced by ProxyConfig::env_set(), and ProxyConfig::lxqt_set().