3000767984

Build Type

github

Committed by GitHub

Commit Message

<a href="https://github.com/google/santa/commit/<a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/f5c8db304344c4ffbc803a35a84921b3df62c29e">f5c8db304">&lt;a href=&quot;https://github.com/google/santa/commit/</a><a class="double-link" href="https://github.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/f5c8db304344c4ffbc803a35a84921b3df62c29e">f5c8db304</a><a href="https://github.com/google/santa/commit/f5c8db304344c4ffbc803a35a84921b3df62c29e">&quot;&gt;&amp;lt;a href=&amp;quot;https://github.com/google/santa/commit/&lt;/a&gt;&lt;a class=&quot;double-link&quot; href=&quot;https://github.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/f5c8db304344c4ffbc803a35a84921b3df62c29e&quot;&gt;f5c8db304&lt;/a&gt;&lt;a href=&quot;https://github.com/google/santa/commit/f5c8db304344c4ffbc803a35a84921b3df62c29e&quot;&gt;&amp;quot;&amp;gt;&amp;amp;lt;a href=&amp;amp;quot;https://github.com/google/santa/commit/&amp;lt;/a&amp;gt;&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://github.com/google/santa/commit/&amp;amp;lt;a class=&amp;amp;quot;double-link&amp;amp;quot; href=&amp;amp;quot;https://git&amp;quot... (continued)

Pull Request Pull Request #888: ES and Logging Interfaces Redesign

Run Details

2351 of 5438 branches covered (43.23%)

Branch coverage included in aggregate %.

3823 of 3823 new or added lines in 61 files covered. (100.0%)

9095 of 13972 relevant lines covered (65.09%)

16199.43 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

27.27

/Source/santad/Logs/EndpointSecurity/Logger.mm

/// Copyright 2022 Google Inc. All rights reserved.
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
///    http://www.apache.org/licenses/LICENSE-2.0
///
///    Unless required by applicable law or agreed to in writing, software
///    distributed under the License is distributed on an "AS IS" BASIS,
///    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
///    See the License for the specific language governing permissions and
///    limitations under the License.

#include "Source/santad/Logs/EndpointSecurity/Logger.h"

#include "Source/common/SNTCommonEnums.h"
#include "Source/common/SNTLogging.h"
#include "Source/common/SNTStoredEvent.h"
#include "Source/santad/Logs/EndpointSecurity/Serializers/BasicString.h"
#include "Source/santad/Logs/EndpointSecurity/Serializers/Empty.h"
#include "Source/santad/Logs/EndpointSecurity/Writers/File.h"
#include "Source/santad/Logs/EndpointSecurity/Writers/Null.h"
#include "Source/santad/Logs/EndpointSecurity/Writers/Syslog.h"

using santa::santad::event_providers::endpoint_security::EndpointSecurityAPI;
using santa::santad::event_providers::endpoint_security::EnrichedMessage;
using santa::santad::event_providers::endpoint_security::Message;
using santa::santad::logs::endpoint_security::serializers::BasicString;
using santa::santad::logs::endpoint_security::serializers::Empty;
using santa::santad::logs::endpoint_security::writers::File;
using santa::santad::logs::endpoint_security::writers::Null;
using santa::santad::logs::endpoint_security::writers::Syslog;

namespace santa::santad::logs::endpoint_security {

// Flush the write buffer every 5 seconds
static const uint64_t kFlushBufferTimeoutMS = 5000;
// Batch writes up to 128kb
static const size_t kBufferBatchSizeBytes = (1024 * 128);
// Reserve an extra 4kb of buffer space to account for event overflow
static const size_t kMaxExpectedWriteSizeBytes = 4096;

// Translate configured log type to appropriate Serializer/Writer pairs
std::unique_ptr<Logger> Logger::Create(std::shared_ptr<EndpointSecurityAPI> esapi,
                                       SNTEventLogType log_type, NSString *event_log_path) {
  switch (log_type) {
    case SNTEventLogTypeFilelog:
      return std::make_unique<Logger>(
        BasicString::Create(esapi),
        File::Create(event_log_path, kFlushBufferTimeoutMS, kBufferBatchSizeBytes,
                     kMaxExpectedWriteSizeBytes));
    case SNTEventLogTypeSyslog:
      return std::make_unique<Logger>(BasicString::Create(esapi, false), Syslog::Create());
    case SNTEventLogTypeNull: return std::make_unique<Logger>(Empty::Create(), Null::Create());
    case SNTEventLogTypeProtobuf:
      LOGE(@"The EventLogType value protobuf is not supported in this release");
      return nullptr;
    default: LOGE(@"Invalid log type: %ld", log_type); return nullptr;
  }
}

Logger::Logger(std::shared_ptr<serializers::Serializer> serializer,
               std::shared_ptr<writers::Writer> writer)
    : serializer_(std::move(serializer)), writer_(std::move(writer)) {}

void Logger::Log(std::shared_ptr<EnrichedMessage> msg) {
  writer_->Write(serializer_->SerializeMessage(std::move(msg)));
}

void Logger::LogAllowlist(const Message &msg, const std::string_view hash) {
  writer_->Write(serializer_->SerializeAllowlist(msg, hash));
}

void Logger::LogBundleHashingEvents(NSArray<SNTStoredEvent *> *events) {
  for (SNTStoredEvent *se in events) {
    writer_->Write(serializer_->SerializeBundleHashingEvent(se));
  }
}

void Logger::LogDiskAppeared(NSDictionary *props) {
  writer_->Write(serializer_->SerializeDiskAppeared(props));
}

void Logger::LogDiskDisappeared(NSDictionary *props) {
  writer_->Write(serializer_->SerializeDiskDisappeared(props));
}

}  // namespace santa::santad::logs::endpoint_security

1	/// Copyright 2022 Google Inc. All rights reserved.
2	///
3	/// Licensed under the Apache License, Version 2.0 (the "License");
4	/// you may not use this file except in compliance with the License.
5	/// You may obtain a copy of the License at
6	///
7	/// http://www.apache.org/licenses/LICENSE-2.0
8	///
9	/// Unless required by applicable law or agreed to in writing, software
10	/// distributed under the License is distributed on an "AS IS" BASIS,
11	/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12	/// See the License for the specific language governing permissions and
13	/// limitations under the License.
14
15	#include "Source/santad/Logs/EndpointSecurity/Logger.h"
16
17	#include "Source/common/SNTCommonEnums.h"
18	#include "Source/common/SNTLogging.h"
19	#include "Source/common/SNTStoredEvent.h"
20	#include "Source/santad/Logs/EndpointSecurity/Serializers/BasicString.h"
21	#include "Source/santad/Logs/EndpointSecurity/Serializers/Empty.h"
22	#include "Source/santad/Logs/EndpointSecurity/Writers/File.h"
23	#include "Source/santad/Logs/EndpointSecurity/Writers/Null.h"
24	#include "Source/santad/Logs/EndpointSecurity/Writers/Syslog.h"
25
26	using santa::santad::event_providers::endpoint_security::EndpointSecurityAPI;
27	using santa::santad::event_providers::endpoint_security::EnrichedMessage;
28	using santa::santad::event_providers::endpoint_security::Message;
29	using santa::santad::logs::endpoint_security::serializers::BasicString;
30	using santa::santad::logs::endpoint_security::serializers::Empty;
31	using santa::santad::logs::endpoint_security::writers::File;
32	using santa::santad::logs::endpoint_security::writers::Null;
33	using santa::santad::logs::endpoint_security::writers::Syslog;
34
35	namespace santa::santad::logs::endpoint_security {
36
37	// Flush the write buffer every 5 seconds
38	static const uint64_t kFlushBufferTimeoutMS = 5000;
39	// Batch writes up to 128kb
40	static const size_t kBufferBatchSizeBytes = (1024 * 128);
41	// Reserve an extra 4kb of buffer space to account for event overflow
42	static const size_t kMaxExpectedWriteSizeBytes = 4096;
43
44	// Translate configured log type to appropriate Serializer/Writer pairs
45	std::unique_ptr<Logger> Logger::Create(std::shared_ptr<EndpointSecurityAPI> esapi,
46	SNTEventLogType log_type, NSString *event_log_path) {	14✔
47	switch (log_type) {	14✔
48	case SNTEventLogTypeFilelog:	×
49	return std::make_unique<Logger>(	×
50	BasicString::Create(esapi),	×
51	File::Create(event_log_path, kFlushBufferTimeoutMS, kBufferBatchSizeBytes,	×
52	kMaxExpectedWriteSizeBytes));	×
53	case SNTEventLogTypeSyslog:	14!
54	return std::make_unique<Logger>(BasicString::Create(esapi, false), Syslog::Create());	14✔
55	case SNTEventLogTypeNull: return std::make_unique<Logger>(Empty::Create(), Null::Create());	×
56	case SNTEventLogTypeProtobuf:	×
57	LOGE(@"The EventLogType value protobuf is not supported in this release");	×
58	return nullptr;	×
59	default: LOGE(@"Invalid log type: %ld", log_type); return nullptr;	×
60	}	14✔
61	}	14✔
62
63	Logger::Logger(std::shared_ptr<serializers::Serializer> serializer,
64	std::shared_ptr<writers::Writer> writer)
65	: serializer_(std::move(serializer)), writer_(std::move(writer)) {}	15✔
66
67	void Logger::Log(std::shared_ptr<EnrichedMessage> msg) {	×
68	writer_->Write(serializer_->SerializeMessage(std::move(msg)));	×
69	}	×
70
71	void Logger::LogAllowlist(const Message &msg, const std::string_view hash) {	×
72	writer_->Write(serializer_->SerializeAllowlist(msg, hash));	×
73	}	×
74
75	void Logger::LogBundleHashingEvents(NSArray<SNTStoredEvent > events) {	×
76	for (SNTStoredEvent *se in events) {	×
77	writer_->Write(serializer_->SerializeBundleHashingEvent(se));	×
78	}	×
79	}	×
80
81	void Logger::LogDiskAppeared(NSDictionary *props) {	×
82	writer_->Write(serializer_->SerializeDiskAppeared(props));	×
83	}	×
84
85	void Logger::LogDiskDisappeared(NSDictionary *props) {	×
86	writer_->Write(serializer_->SerializeDiskDisappeared(props));	×
87	}	×
88
89	} // namespace santa::santad::logs::endpoint_security

google / santa / 3000767984

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous