ProcEventMonitor.hpp

1. Overview

Process-event monitor interface. Declares fork, exec, exit and other process events delivered through the Linux netlink connector.

The original source path is:

include/bsc/netlink/ProcEventMonitor.hpp

2. Role in the Daemon

This file participates in the privileged BastionGuard Secure Connection daemon. It uses the shared bsc models and follows the daemon-wide fallback strategy: optional high-fidelity backends are used when available, while portable polling or stub behavior preserves service startup.


3. Namespaces

  • bsc::netlink

4. Dependencies and Included Interfaces

  • atomic
  • cstdint
  • functional
  • memory
  • string

5. Declared Types

  • struct ProcEvent
  • enum class Type
  • class ProcEventMonitor
  • class Impl

6. State and Data Members

The interface declares the following relevant state members:

  • std::string comm
  • class Impl
  • std::unique_ptr<Impl> impl_

7. API and Functions

The file declares or implements the following callable entry points:

  • bool start(Handler handler)
  • void stop()
  • static bool available()
  • ProcEventMonitor()

8. Concurrency and Lifecycle

  • Uses atomic flags for lifecycle or activity state.

9. Implementation Considerations

  • Atomic flags are used for low-cost lifecycle or activity state coordination.

10. Source Metrics

MetricValue
File size1032 bytes
Lines54
Detected API entries4
Detected types4