BastionGuard::DnsmasqBackend Class Reference

#include <dnsmasq_backend.hpp>

Public Member Functions
	DnsmasqBackend (const std::string &blacklist_path="/etc/dnsmasq.d/BastionGuard-blacklist.conf", const std::string &whitelist_path="/etc/dnsmasq.d/BastionGuard-whitelist.conf", const std::string &dnsmasq_user="dnsmasq")
bool	add_to_blacklist (const std::string &domain)
bool	remove_from_blacklist (const std::string &domain)
bool	add_to_whitelist (const std::string &domain)
bool	remove_from_whitelist (const std::string &domain)
bool	write_blacklist (const std::vector< std::string > &domains)
bool	write_whitelist (const std::vector< std::string > &domains)
bool	reload_dnsmasq ()

Private Member Functions
bool	atomic_write (const std::string &path, const std::string &content)
std::string	make_dnsmasq_entries (const std::vector< std::string > &domains)

Private Attributes
std::string	blacklist_path_
std::string	whitelist_path_
std::string	dnsmasq_user_

Detailed Description

Definition at line 26 of file dnsmasq_backend.hpp.

Constructor & Destructor Documentation

DnsmasqBackend()

BastionGuard::DnsmasqBackend::DnsmasqBackend	(	const std::string &	blacklist_path = "/etc/dnsmasq.d/BastionGuard-blacklist.conf",
		const std::string &	whitelist_path = "/etc/dnsmasq.d/BastionGuard-whitelist.conf",
		const std::string &	dnsmasq_user = "dnsmasq" )

Definition at line 41 of file dnsmasq_backend.cpp.

    : blacklist_path_(bl),
      whitelist_path_(wl),
      dnsmasq_user_(user)
{
}

References blacklist_path_, dnsmasq_user_, and whitelist_path_.

Member Function Documentation

add_to_blacklist()

bool BastionGuard::DnsmasqBackend::add_to_blacklist

(

const std::string &

domain

)

Definition at line 123 of file dnsmasq_backend.cpp.

{
    std::thread([this, domain] {
        ensure_loaded(blacklist_path_, whitelist_path_);
 
        std::lock_guard<std::mutex> lock(g_mutex);
        if (std::find(g_blacklist.begin(), g_blacklist.end(), domain)
            != g_blacklist.end())
            return;
 
        g_blacklist.push_back(domain);
 
        write_blacklist(g_blacklist);
        reload_dnsmasq();
    }).detach();
 
    return true;
}

References blacklist_path_, BastionGuard::ensure_loaded(), BastionGuard::g_blacklist, BastionGuard::g_mutex, reload_dnsmasq(), whitelist_path_, and write_blacklist().

add_to_whitelist()

bool BastionGuard::DnsmasqBackend::add_to_whitelist

(

const std::string &

domain

)

Definition at line 160 of file dnsmasq_backend.cpp.

{
    std::thread([this, domain] {
        ensure_loaded(blacklist_path_, whitelist_path_);
 
        std::lock_guard<std::mutex> lock(g_mutex);
        if (std::find(g_whitelist.begin(), g_whitelist.end(), domain)
            != g_whitelist.end())
            return;
 
        g_whitelist.push_back(domain);
 
        write_whitelist(g_whitelist);
    }).detach();
 
    return true;
}

References blacklist_path_, BastionGuard::ensure_loaded(), BastionGuard::g_mutex, BastionGuard::g_whitelist, whitelist_path_, and write_whitelist().

atomic_write()

bool BastionGuard::DnsmasqBackend::atomic_write ( const std::string & path, const std::string & content )

private

Definition at line 93 of file dnsmasq_backend.cpp.

{
    try {
        fs::path p(path);
        fs::path tmp = p.string() + ".tmp";
 
        {
            std::ofstream o(tmp);
            if (!o) return false;
            o << content;
        }
        fs::rename(tmp, p);
        return true;
    } catch (...) {
        return false;
    }
}

Referenced by write_blacklist(), and write_whitelist().

make_dnsmasq_entries()

std::string BastionGuard::DnsmasqBackend::make_dnsmasq_entries ( const std::vector< std::string > & domains )

private

Definition at line 113 of file dnsmasq_backend.cpp.

{
    std::ostringstream oss;
    for (auto& d : domains)
        oss << "address=/" << d << "/127.0.0.1\n";
    return oss.str();
}

Referenced by write_blacklist().

reload_dnsmasq()

bool BastionGuard::DnsmasqBackend::reload_dnsmasq

(

)

Definition at line 212 of file dnsmasq_backend.cpp.

{
    int st = (bg_process::run({"/usr/libexec/bastionguard/bastionguard-service", "--system", "try-reload-or-restart", "dnsmasq.service"}).exit_code);
    return WIFEXITED(st) && WEXITSTATUS(st) == 0;
}

References bg_process::run().

Referenced by add_to_blacklist(), and remove_from_blacklist().

remove_from_blacklist()

bool BastionGuard::DnsmasqBackend::remove_from_blacklist

(

const std::string &

domain

)

Definition at line 142 of file dnsmasq_backend.cpp.

{
    std::thread([this, domain] {
        ensure_loaded(blacklist_path_, whitelist_path_);
 
        std::lock_guard<std::mutex> lock(g_mutex);
 
        g_blacklist.erase(
            std::remove(g_blacklist.begin(), g_blacklist.end(), domain),
            g_blacklist.end());
 
        write_blacklist(g_blacklist);
        reload_dnsmasq();
    }).detach();
 
    return true;
}

References blacklist_path_, BastionGuard::ensure_loaded(), BastionGuard::g_blacklist, BastionGuard::g_mutex, reload_dnsmasq(), whitelist_path_, and write_blacklist().

remove_from_whitelist()

bool BastionGuard::DnsmasqBackend::remove_from_whitelist

(

const std::string &

domain

)

Definition at line 178 of file dnsmasq_backend.cpp.

{
    std::thread([this, domain] {
        ensure_loaded(blacklist_path_, whitelist_path_);
 
        std::lock_guard<std::mutex> lock(g_mutex);
 
        g_whitelist.erase(
            std::remove(g_whitelist.begin(), g_whitelist.end(), domain),
            g_whitelist.end());
 
        write_whitelist(g_whitelist);
    }).detach();
 
    return true;
}

References blacklist_path_, BastionGuard::ensure_loaded(), BastionGuard::g_mutex, BastionGuard::g_whitelist, whitelist_path_, and write_whitelist().

write_blacklist()

bool BastionGuard::DnsmasqBackend::write_blacklist

(

const std::vector< std::string > &

domains

)

Definition at line 196 of file dnsmasq_backend.cpp.

{
    return atomic_write(blacklist_path_, make_dnsmasq_entries(domains));
}

References atomic_write(), blacklist_path_, and make_dnsmasq_entries().

Referenced by add_to_blacklist(), and remove_from_blacklist().

write_whitelist()

bool BastionGuard::DnsmasqBackend::write_whitelist

(

const std::vector< std::string > &

domains

)

Definition at line 202 of file dnsmasq_backend.cpp.

{
    std::ostringstream oss;
    for (auto& d : domains)
        oss << d << "\n";
    return atomic_write(whitelist_path_, oss.str());
}

References atomic_write(), and whitelist_path_.

Referenced by add_to_whitelist(), and remove_from_whitelist().

Member Data Documentation

blacklist_path_

std::string BastionGuard::DnsmasqBackend::blacklist_path_

private

Definition at line 45 of file dnsmasq_backend.hpp.

Referenced by add_to_blacklist(), add_to_whitelist(), DnsmasqBackend(), remove_from_blacklist(), remove_from_whitelist(), and write_blacklist().

dnsmasq_user_

std::string BastionGuard::DnsmasqBackend::dnsmasq_user_

private

Definition at line 47 of file dnsmasq_backend.hpp.

Referenced by DnsmasqBackend().

whitelist_path_

std::string BastionGuard::DnsmasqBackend::whitelist_path_

private

Definition at line 46 of file dnsmasq_backend.hpp.

Referenced by add_to_blacklist(), add_to_whitelist(), DnsmasqBackend(), remove_from_blacklist(), remove_from_whitelist(), and write_whitelist().

---

The documentation for this class was generated from the following files:

• BastionGuard/src/phishing/dnsmasq_backend.hpp
• BastionGuard/src/phishing/dnsmasq_backend.cpp