3049636323

Build Type

github

Committed by GitHub

Commit Message

<a href="https://github.com/google/santa/commit/<a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/ff6ed30ff3c739bc7f0e93af024aae6b8da3b8c0">ff6ed30ff">&lt;a href=&quot;https://github.com/google/santa/commit/</a><a class="double-link" href="https://github.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/ff6ed30ff3c739bc7f0e93af024aae6b8da3b8c0">ff6ed30ff</a><a href="https://github.com/google/santa/commit/ff6ed30ff3c739bc7f0e93af024aae6b8da3b8c0">&quot;&gt;&amp;lt;a href=&amp;quot;https://github.com/google/santa/commit/&lt;/a&gt;&lt;a class=&quot;double-link&quot; href=&quot;https://github.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/ff6ed30ff3c739bc7f0e93af024aae6b8da3b8c0&quot;&gt;ff6ed30ff&lt;/a&gt;&lt;a href=&quot;https://github.com/google/santa/commit/ff6ed30ff3c739bc7f0e93af024aae6b8da3b8c0&quot;&gt;&amp;quot;&amp;gt;&amp;amp;lt;a href=&amp;amp;quot;https://github.com/google/santa/commit/&amp;lt;/a&amp;gt;&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://github.com/google/santa/commit/&amp;amp;lt;a class=&amp;amp;quot;double-link&amp;amp;quot; href=&amp;amp;quot;https://git&amp;quot... (continued)

Pull Request Pull Request #888: ES and Logging Interfaces Redesign

Run Details

2417 of 5498 branches covered (43.96%)

Branch coverage included in aggregate %.

3910 of 3910 new or added lines in 63 files covered. (100.0%)

9435 of 14135 relevant lines covered (66.75%)

17178.76 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/Source/santad/EventProviders/EndpointSecurity/EndpointSecurityAPI.mm

/// Copyright 2022 Google Inc. All rights reserved.
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
///    http://www.apache.org/licenses/LICENSE-2.0
///
///    Unless required by applicable law or agreed to in writing, software
///    distributed under the License is distributed on an "AS IS" BASIS,
///    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
///    See the License for the specific language governing permissions and
///    limitations under the License.

#include "Source/santad/EventProviders/EndpointSecurity/EndpointSecurityAPI.h"
#include <EndpointSecurity/ESTypes.h>

#include <set>
#include <vector>

namespace santa::santad::event_providers::endpoint_security {

Client EndpointSecurityAPI::NewClient(void (^message_handler)(es_client_t *, Message)) {
  es_client_t *client = NULL;

  auto shared_esapi = shared_from_this();
  es_new_client_result_t res = es_new_client(&client, ^(es_client_t *c, const es_message_t *msg) {
    @autoreleasepool {
      message_handler(c, Message(shared_esapi, msg));
    }
  });

  return Client(client, res);
}

es_message_t *EndpointSecurityAPI::RetainMessage(const es_message_t *msg) {
  if (@available(macOS 11.0, *)) {
    es_retain_message(msg);
    es_message_t *nonconst = const_cast<es_message_t *>(msg);
    return nonconst;
  } else {
#pragma clang diagnostic push
#pragma clang diagnostic ignored "-Wdeprecated-declarations"
    return es_copy_message(msg);
#pragma clang diagnostic pop
  }
}

void EndpointSecurityAPI::ReleaseMessage(es_message_t *msg) {
  if (@available(macOS 11.0, *)) {
    es_release_message(msg);
  } else {
#pragma clang diagnostic push
#pragma clang diagnostic ignored "-Wdeprecated-declarations"
    return es_free_message(msg);
#pragma clang diagnostic pop
  }
}

bool EndpointSecurityAPI::Subscribe(const Client &client,
                                    const std::set<es_event_type_t> &event_types) {
  std::vector<es_event_type_t> subs(event_types.begin(), event_types.end());
  return es_subscribe(client.Get(), subs.data(), (uint32_t)subs.size()) == ES_RETURN_SUCCESS;
}

bool EndpointSecurityAPI::RespondAuthResult(const Client &client, const Message &msg,
                                            es_auth_result_t result, bool cache) {
  return es_respond_auth_result(client.Get(), &(*msg), result, cache) == ES_RESPOND_RESULT_SUCCESS;
}

bool EndpointSecurityAPI::MuteProcess(const Client &client, const audit_token_t *tok) {
  return es_mute_process(client.Get(), tok) == ES_RETURN_SUCCESS;
}

bool EndpointSecurityAPI::ClearCache(const Client &client) {
  return es_clear_cache(client.Get()) == ES_CLEAR_CACHE_RESULT_SUCCESS;
}

uint32_t EndpointSecurityAPI::ExecArgCount(const es_event_exec_t *event) {
  return es_exec_arg_count(event);
}

es_string_token_t EndpointSecurityAPI::ExecArg(const es_event_exec_t *event, uint32_t index) {
  return es_exec_arg(event, index);
}

}  // namespace santa::santad::event_providers::endpoint_security

1	/// Copyright 2022 Google Inc. All rights reserved.
2	///
3	/// Licensed under the Apache License, Version 2.0 (the "License");
4	/// you may not use this file except in compliance with the License.
5	/// You may obtain a copy of the License at
6	///
7	/// http://www.apache.org/licenses/LICENSE-2.0
8	///
9	/// Unless required by applicable law or agreed to in writing, software
10	/// distributed under the License is distributed on an "AS IS" BASIS,
11	/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12	/// See the License for the specific language governing permissions and
13	/// limitations under the License.
14
15	#include "Source/santad/EventProviders/EndpointSecurity/EndpointSecurityAPI.h"
16	#include <EndpointSecurity/ESTypes.h>
17
18	#include <set>
19	#include <vector>
20
21	namespace santa::santad::event_providers::endpoint_security {
22
23	Client EndpointSecurityAPI::NewClient(void (^message_handler)(es_client_t *, Message)) {	×
24	es_client_t *client = NULL;	×
25
26	auto shared_esapi = shared_from_this();	×
27	es_new_client_result_t res = es_new_client(&client, ^(es_client_t c, const es_message_t msg) {	×
28	@autoreleasepool {	×
29	message_handler(c, Message(shared_esapi, msg));	×
30	}	×
31	});	×
32
33	return Client(client, res);	×
34	}	×
35
36	es_message_t EndpointSecurityAPI::RetainMessage(const es_message_t msg) {	×
37	if (@available(macOS 11.0, *)) {	×
38	es_retain_message(msg);	×
39	es_message_t nonconst = const_cast<es_message_t >(msg);	×
40	return nonconst;	×
41	} else {	×
42	#pragma clang diagnostic push	×
43	#pragma clang diagnostic ignored "-Wdeprecated-declarations"	×
44	return es_copy_message(msg);	×
45	#pragma clang diagnostic pop	×
46	}	×
47	}	×
48
49	void EndpointSecurityAPI::ReleaseMessage(es_message_t *msg) {	×
50	if (@available(macOS 11.0, *)) {	×
51	es_release_message(msg);	×
52	} else {	×
53	#pragma clang diagnostic push	×
54	#pragma clang diagnostic ignored "-Wdeprecated-declarations"	×
55	return es_free_message(msg);	×
56	#pragma clang diagnostic pop	×
57	}	×
58	}	×
59
60	bool EndpointSecurityAPI::Subscribe(const Client &client,
61	const std::set<es_event_type_t> &event_types) {	×
62	std::vector<es_event_type_t> subs(event_types.begin(), event_types.end());	×
63	return es_subscribe(client.Get(), subs.data(), (uint32_t)subs.size()) == ES_RETURN_SUCCESS;	×
64	}	×
65
66	bool EndpointSecurityAPI::RespondAuthResult(const Client &client, const Message &msg,
67	es_auth_result_t result, bool cache) {	×
68	return es_respond_auth_result(client.Get(), &(*msg), result, cache) == ES_RESPOND_RESULT_SUCCESS;	×
69	}	×
70
71	bool EndpointSecurityAPI::MuteProcess(const Client &client, const audit_token_t *tok) {	×
72	return es_mute_process(client.Get(), tok) == ES_RETURN_SUCCESS;	×
73	}	×
74
75	bool EndpointSecurityAPI::ClearCache(const Client &client) {	×
76	return es_clear_cache(client.Get()) == ES_CLEAR_CACHE_RESULT_SUCCESS;	×
77	}	×
78
79	uint32_t EndpointSecurityAPI::ExecArgCount(const es_event_exec_t *event) {	×
80	return es_exec_arg_count(event);	×
81	}	×
82
83	es_string_token_t EndpointSecurityAPI::ExecArg(const es_event_exec_t *event, uint32_t index) {	×
84	return es_exec_arg(event, index);	×
85	}	×
86
87	} // namespace santa::santad::event_providers::endpoint_security

google / santa / 3049636323

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous