6739774760

Committed 03 Nov 2023 12:30AM UTC coverage: 64.019% (-0.06%) from 64.074%

Build # 6739774760

Build Type

push

github

Committed by

web-flow

Commit Message

Add OnStartUSBOptions to santactl status (#1219)

Run Details

4270 of 8710 branches covered (0.0%)

Branch coverage included in aggregate %.

0 of 12 new or added lines in 1 file covered. (0.0%)

2 existing lines in 1 file now uncovered.

14903 of 21239 relevant lines covered (70.17%)

15022.71 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/Source/santactl/Commands/SNTCommandStatus.m

/// Copyright 2015-2022 Google Inc. All rights reserved.
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
///    http://www.apache.org/licenses/LICENSE-2.0
///
///    Unless required by applicable law or agreed to in writing, software
///    distributed under the License is distributed on an "AS IS" BASIS,
///    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
///    See the License for the specific language governing permissions and
///    limitations under the License.

#import <Foundation/Foundation.h>
#import <MOLXPCConnection/MOLXPCConnection.h>

#import "Source/common/SNTCommonEnums.h"
#import "Source/common/SNTConfigurator.h"
#import "Source/common/SNTXPCControlInterface.h"
#import "Source/santactl/SNTCommand.h"
#import "Source/santactl/SNTCommandController.h"

NSString *StartupOptionToString(SNTDeviceManagerStartupPreferences pref) {
  switch (pref) {
    case SNTDeviceManagerStartupPreferencesUnmount: return @"Unmount";
    case SNTDeviceManagerStartupPreferencesForceUnmount: return @"ForceUnmount";
    case SNTDeviceManagerStartupPreferencesRemount: return @"Remount";
    case SNTDeviceManagerStartupPreferencesForceRemount: return @"ForceRemount";
    default: return @"None";
  }
}

@interface SNTCommandStatus : SNTCommand <SNTCommandProtocol>
@end

@implementation SNTCommandStatus

REGISTER_COMMAND_NAME(@"status")

+ (BOOL)requiresRoot {
  return NO;
}

+ (BOOL)requiresDaemonConn {
  return YES;
}

+ (NSString *)shortHelpText {
  return @"Show Santa status information.";
}

+ (NSString *)longHelpText {
  return (@"Provides details about Santa while it's running.\n"
          @"  Use --json to output in JSON format");
}

- (void)runWithArguments:(NSArray *)arguments {
  dispatch_group_t group = dispatch_group_create();
  id<SNTDaemonControlXPC> rop = [self.daemonConn synchronousRemoteObjectProxy];

  // Daemon status
  __block NSString *clientMode;
  __block uint64_t cpuEvents, ramEvents;
  __block double cpuPeak, ramPeak;
  [rop clientMode:^(SNTClientMode cm) {
    switch (cm) {
      case SNTClientModeMonitor: clientMode = @"Monitor"; break;
      case SNTClientModeLockdown: clientMode = @"Lockdown"; break;
      default: clientMode = [NSString stringWithFormat:@"Unknown (%ld)", cm]; break;
    }
  }];

  [rop watchdogInfo:^(uint64_t wd_cpuEvents, uint64_t wd_ramEvents, double wd_cpuPeak,
                      double wd_ramPeak) {
    cpuEvents = wd_cpuEvents;
    cpuPeak = wd_cpuPeak;
    ramEvents = wd_ramEvents;
    ramPeak = wd_ramPeak;
  }];

  BOOL fileLogging = ([[SNTConfigurator configurator] fileChangesRegex] != nil);
  NSString *eventLogType = [[[SNTConfigurator configurator] eventLogTypeRaw] lowercaseString];

  SNTConfigurator *configurator = [SNTConfigurator configurator];

  // Cache status
  __block uint64_t rootCacheCount = -1, nonRootCacheCount = -1;
  [rop cacheCounts:^(uint64_t rootCache, uint64_t nonRootCache) {
    rootCacheCount = rootCache;
    nonRootCacheCount = nonRootCache;
  }];

  // Database counts
  __block int64_t eventCount = -1;
  __block int64_t binaryRuleCount = -1;
  __block int64_t certRuleCount = -1;
  __block int64_t teamIDRuleCount = -1;
  __block int64_t signingIDRuleCount = -1;
  __block int64_t compilerRuleCount = -1;
  __block int64_t transitiveRuleCount = -1;
  [rop databaseRuleCounts:^(int64_t binary, int64_t certificate, int64_t compiler,
                            int64_t transitive, int64_t teamID, int64_t signingID) {
    binaryRuleCount = binary;
    certRuleCount = certificate;
    teamIDRuleCount = teamID;
    signingIDRuleCount = signingID;
    compilerRuleCount = compiler;
    transitiveRuleCount = transitive;
  }];
  [rop databaseEventCount:^(int64_t count) {
    eventCount = count;
  }];

  // Static rule count
  __block int64_t staticRuleCount = -1;
  [rop staticRuleCount:^(int64_t count) {
    staticRuleCount = count;
  }];

  // Sync status
  __block NSDate *fullSyncLastSuccess;
  [rop fullSyncLastSuccess:^(NSDate *date) {
    fullSyncLastSuccess = date;
  }];

  __block NSDate *ruleSyncLastSuccess;
  [rop ruleSyncLastSuccess:^(NSDate *date) {
    ruleSyncLastSuccess = date;
  }];

  __block BOOL syncCleanReqd = NO;
  [rop syncCleanRequired:^(BOOL clean) {
    syncCleanReqd = clean;
  }];

  __block BOOL pushNotifications = NO;
  if ([[SNTConfigurator configurator] syncBaseURL]) {
    [rop pushNotifications:^(BOOL response) {
      pushNotifications = response;
    }];
  }

  __block BOOL enableBundles = NO;
  if ([[SNTConfigurator configurator] syncBaseURL]) {
    [rop enableBundles:^(BOOL response) {
      enableBundles = response;
    }];
  }

  __block BOOL enableTransitiveRules = NO;
  [rop enableTransitiveRules:^(BOOL response) {
    enableTransitiveRules = response;
  }];

  __block BOOL watchItemsEnabled = NO;
  __block uint64_t watchItemsRuleCount = 0;
  __block NSString *watchItemsPolicyVersion = nil;
  __block NSString *watchItemsConfigPath = nil;
  __block NSTimeInterval watchItemsLastUpdateEpoch = 0;
  [rop watchItemsState:^(BOOL enabled, uint64_t ruleCount, NSString *policyVersion,
                         NSString *configPath, NSTimeInterval lastUpdateEpoch) {
    watchItemsEnabled = enabled;
    if (enabled) {
      watchItemsRuleCount = ruleCount;
      watchItemsPolicyVersion = policyVersion;
      watchItemsConfigPath = configPath;
      watchItemsLastUpdateEpoch = lastUpdateEpoch;
    }
  }];

  // Wait a maximum of 5s for stats collected from daemon to arrive.
  if (dispatch_group_wait(group, dispatch_time(DISPATCH_TIME_NOW, NSEC_PER_SEC * 5))) {
    fprintf(stderr, "Failed to retrieve some stats from daemon\n\n");
  }

  // Format dates
  NSDateFormatter *dateFormatter = [[NSDateFormatter alloc] init];
  dateFormatter.dateFormat = @"yyyy/MM/dd HH:mm:ss Z";
  NSString *fullSyncLastSuccessStr = [dateFormatter stringFromDate:fullSyncLastSuccess] ?: @"Never";
  NSString *ruleSyncLastSuccessStr =
    [dateFormatter stringFromDate:ruleSyncLastSuccess] ?: fullSyncLastSuccessStr;

  NSString *watchItemsLastUpdateStr =
    [dateFormatter stringFromDate:[NSDate dateWithTimeIntervalSince1970:watchItemsLastUpdateEpoch]]
      ?: @"Never";

  NSString *syncURLStr = configurator.syncBaseURL.absoluteString;

  BOOL exportMetrics = configurator.exportMetrics;
  NSURL *metricsURLStr = configurator.metricURL;
  NSUInteger metricExportInterval = configurator.metricExportInterval;

  if ([arguments containsObject:@"--json"]) {
    NSMutableDictionary *stats = [@{
      @"daemon" : @{
        @"driver_connected" : @(YES),
        @"mode" : clientMode ?: @"null",
        @"log_type" : eventLogType,
        @"file_logging" : @(fileLogging),
        @"watchdog_cpu_events" : @(cpuEvents),
        @"watchdog_ram_events" : @(ramEvents),
        @"watchdog_cpu_peak" : @(cpuPeak),
        @"watchdog_ram_peak" : @(ramPeak),
        @"block_usb" : @(configurator.blockUSBMount),
        @"remount_usb_mode" : (configurator.blockUSBMount && configurator.remountUSBMode.count
                                 ? configurator.remountUSBMode
                                 : @""),
        @"on_start_usb_options" : StartupOptionToString(configurator.onStartUSBOptions),
      },
      @"database" : @{
        @"binary_rules" : @(binaryRuleCount),
        @"certificate_rules" : @(certRuleCount),
        @"teamid_rules" : @(teamIDRuleCount),
        @"signingid_rules" : @(signingIDRuleCount),
        @"compiler_rules" : @(compilerRuleCount),
        @"transitive_rules" : @(transitiveRuleCount),
        @"events_pending_upload" : @(eventCount),
      },
      @"static_rules" : @{
        @"rule_count" : @(staticRuleCount),
      },
      @"sync" : @{
        @"server" : syncURLStr ?: @"null",
        @"clean_required" : @(syncCleanReqd),
        @"last_successful_full" : fullSyncLastSuccessStr ?: @"null",
        @"last_successful_rule" : ruleSyncLastSuccessStr ?: @"null",
        @"push_notifications" : pushNotifications ? @"Connected" : @"Disconnected",
        @"bundle_scanning" : @(enableBundles),
        @"transitive_rules" : @(enableTransitiveRules),
      },
    } mutableCopy];

    NSDictionary *watchItems;
    if (watchItemsEnabled) {
      watchItems = @{
        @"enabled" : @(watchItemsEnabled),
        @"rule_count" : @(watchItemsRuleCount),
        @"policy_version" : watchItemsPolicyVersion,
        @"config_path" : watchItemsConfigPath ?: @"null",
        @"last_policy_update" : watchItemsLastUpdateStr ?: @"null",
      };
    } else {
      watchItems = @{
        @"enabled" : @(watchItemsEnabled),
      };
    }
    stats[@"watch_items"] = watchItems;

    stats[@"cache"] = @{
      @"root_cache_count" : @(rootCacheCount),
      @"non_root_cache_count" : @(nonRootCacheCount),
    };

    NSData *statsData = [NSJSONSerialization dataWithJSONObject:stats
                                                        options:NSJSONWritingPrettyPrinted
                                                          error:nil];
    NSString *statsStr = [[NSString alloc] initWithData:statsData encoding:NSUTF8StringEncoding];
    printf("%s\n", [statsStr UTF8String]);
  } else {
    printf(">>> Daemon Info\n");
    printf("  %-25s | %s\n", "Mode", [clientMode UTF8String]);
    printf("  %-25s | %s\n", "Log Type", [eventLogType UTF8String]);
    printf("  %-25s | %s\n", "File Logging", (fileLogging ? "Yes" : "No"));
    printf("  %-25s | %s\n", "USB Blocking", (configurator.blockUSBMount ? "Yes" : "No"));
    if (configurator.blockUSBMount && configurator.remountUSBMode.count > 0) {
      printf("  %-25s | %s\n", "USB Remounting Mode",
             [[configurator.remountUSBMode componentsJoinedByString:@", "] UTF8String]);
    }
    printf("  %-25s | %s\n", "On Start USB Options", StartupOptionToString(configurator.onStartUSBOptions).UTF8String);
    printf("  %-25s | %lld  (Peak: %.2f%%)\n", "Watchdog CPU Events", cpuEvents, cpuPeak);
    printf("  %-25s | %lld  (Peak: %.2fMB)\n", "Watchdog RAM Events", ramEvents, ramPeak);

    printf(">>> Cache Info\n");
    printf("  %-25s | %lld\n", "Root cache count", rootCacheCount);
    printf("  %-25s | %lld\n", "Non-root cache count", nonRootCacheCount);

    printf(">>> Database Info\n");
    printf("  %-25s | %lld\n", "Binary Rules", binaryRuleCount);
    printf("  %-25s | %lld\n", "Certificate Rules", certRuleCount);
    printf("  %-25s | %lld\n", "TeamID Rules", teamIDRuleCount);
    printf("  %-25s | %lld\n", "SigningID Rules", signingIDRuleCount);
    printf("  %-25s | %lld\n", "Compiler Rules", compilerRuleCount);
    printf("  %-25s | %lld\n", "Transitive Rules", transitiveRuleCount);
    printf("  %-25s | %lld\n", "Events Pending Upload", eventCount);

    if ([SNTConfigurator configurator].staticRules.count) {
      printf(">>> Static Rules\n");
      printf("  %-25s | %lld\n", "Rules", staticRuleCount);
    }

    printf(">>> Watch Items\n");
    printf("  %-25s | %s\n", "Enabled", (watchItemsEnabled ? "Yes" : "No"));
    if (watchItemsEnabled) {
      printf("  %-25s | %s\n", "Policy Version", watchItemsPolicyVersion.UTF8String);
      printf("  %-25s | %llu\n", "Rule Count", watchItemsRuleCount);
      printf("  %-25s | %s\n", "Config Path", (watchItemsConfigPath ?: @"(embedded)").UTF8String);
      printf("  %-25s | %s\n", "Last Policy Update", watchItemsLastUpdateStr.UTF8String);
    }

    if (syncURLStr) {
      printf(">>> Sync Info\n");
      printf("  %-25s | %s\n", "Sync Server", [syncURLStr UTF8String]);
      printf("  %-25s | %s\n", "Clean Sync Required", (syncCleanReqd ? "Yes" : "No"));
      printf("  %-25s | %s\n", "Last Successful Full Sync", [fullSyncLastSuccessStr UTF8String]);
      printf("  %-25s | %s\n", "Last Successful Rule Sync", [ruleSyncLastSuccessStr UTF8String]);
      printf("  %-25s | %s\n", "Push Notifications",
             (pushNotifications ? "Connected" : "Disconnected"));
      printf("  %-25s | %s\n", "Bundle Scanning", (enableBundles ? "Yes" : "No"));
      printf("  %-25s | %s\n", "Transitive Rules", (enableTransitiveRules ? "Yes" : "No"));
    }

    if (exportMetrics) {
      printf(">>> Metrics Info\n");
      printf("  %-25s | %s\n", "Metrics Server", [[metricsURLStr absoluteString] UTF8String]);
      printf("  %-25s | %lu\n", "Export Interval (seconds)", metricExportInterval);
    }
  }

  exit(0);
}

@end

1	/// Copyright 2015-2022 Google Inc. All rights reserved.
2	///
3	/// Licensed under the Apache License, Version 2.0 (the "License");
4	/// you may not use this file except in compliance with the License.
5	/// You may obtain a copy of the License at
6	///
7	/// http://www.apache.org/licenses/LICENSE-2.0
8	///
9	/// Unless required by applicable law or agreed to in writing, software
10	/// distributed under the License is distributed on an "AS IS" BASIS,
11	/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12	/// See the License for the specific language governing permissions and
13	/// limitations under the License.
14
15	#import <Foundation/Foundation.h>
16	#import <MOLXPCConnection/MOLXPCConnection.h>
17
18	#import "Source/common/SNTCommonEnums.h"
19	#import "Source/common/SNTConfigurator.h"
20	#import "Source/common/SNTXPCControlInterface.h"
21	#import "Source/santactl/SNTCommand.h"
22	#import "Source/santactl/SNTCommandController.h"
23
NEW 24	NSString *StartupOptionToString(SNTDeviceManagerStartupPreferences pref) {	×
NEW 25	switch (pref) {	×
NEW 26	case SNTDeviceManagerStartupPreferencesUnmount: return @"Unmount";	×
NEW 27	case SNTDeviceManagerStartupPreferencesForceUnmount: return @"ForceUnmount";	×
NEW 28	case SNTDeviceManagerStartupPreferencesRemount: return @"Remount";	×
NEW 29	case SNTDeviceManagerStartupPreferencesForceRemount: return @"ForceRemount";	×
NEW 30	default: return @"None";	×
NEW 31	}	×
NEW 32	}	×
33
34	@interface SNTCommandStatus : SNTCommand <SNTCommandProtocol>
35	@end
36
37	@implementation SNTCommandStatus
38
39	REGISTER_COMMAND_NAME(@"status")
40
41	+ (BOOL)requiresRoot {	×
42	return NO;	×
43	}	×
44
45	+ (BOOL)requiresDaemonConn {	×
46	return YES;	×
47	}	×
48
49	+ (NSString *)shortHelpText {	×
50	return @"Show Santa status information.";	×
51	}	×
52
53	+ (NSString *)longHelpText {	×
54	return (@"Provides details about Santa while it's running.\n"	×
55	@" Use --json to output in JSON format");	×
56	}	×
57
58	- (void)runWithArguments:(NSArray *)arguments {	×
59	dispatch_group_t group = dispatch_group_create();	×
60	id<SNTDaemonControlXPC> rop = [self.daemonConn synchronousRemoteObjectProxy];	×
61
62	// Daemon status
63	__block NSString *clientMode;	×
64	__block uint64_t cpuEvents, ramEvents;	×
65	__block double cpuPeak, ramPeak;	×
66	[rop clientMode:^(SNTClientMode cm) {	×
67	switch (cm) {	×
68	case SNTClientModeMonitor: clientMode = @"Monitor"; break;	×
69	case SNTClientModeLockdown: clientMode = @"Lockdown"; break;	×
70	default: clientMode = [NSString stringWithFormat:@"Unknown (%ld)", cm]; break;	×
71	}	×
72	}];	×
73
74	[rop watchdogInfo:^(uint64_t wd_cpuEvents, uint64_t wd_ramEvents, double wd_cpuPeak,	×
75	double wd_ramPeak) {	×
76	cpuEvents = wd_cpuEvents;	×
77	cpuPeak = wd_cpuPeak;	×
78	ramEvents = wd_ramEvents;	×
79	ramPeak = wd_ramPeak;	×
80	}];	×
81
82	BOOL fileLogging = ([[SNTConfigurator configurator] fileChangesRegex] != nil);	×
83	NSString *eventLogType = [[[SNTConfigurator configurator] eventLogTypeRaw] lowercaseString];	×
84
85	SNTConfigurator *configurator = [SNTConfigurator configurator];	×
86
87	// Cache status
88	__block uint64_t rootCacheCount = -1, nonRootCacheCount = -1;	×
89	[rop cacheCounts:^(uint64_t rootCache, uint64_t nonRootCache) {	×
90	rootCacheCount = rootCache;	×
91	nonRootCacheCount = nonRootCache;	×
92	}];	×
93
94	// Database counts
95	__block int64_t eventCount = -1;	×
96	__block int64_t binaryRuleCount = -1;	×
97	__block int64_t certRuleCount = -1;	×
98	__block int64_t teamIDRuleCount = -1;	×
99	__block int64_t signingIDRuleCount = -1;	×
100	__block int64_t compilerRuleCount = -1;	×
101	__block int64_t transitiveRuleCount = -1;	×
102	[rop databaseRuleCounts:^(int64_t binary, int64_t certificate, int64_t compiler,	×
103	int64_t transitive, int64_t teamID, int64_t signingID) {	×
104	binaryRuleCount = binary;	×
105	certRuleCount = certificate;	×
106	teamIDRuleCount = teamID;	×
107	signingIDRuleCount = signingID;	×
108	compilerRuleCount = compiler;	×
109	transitiveRuleCount = transitive;	×
110	}];	×
111	[rop databaseEventCount:^(int64_t count) {	×
112	eventCount = count;	×
113	}];	×
114
115	// Static rule count
116	__block int64_t staticRuleCount = -1;	×
117	[rop staticRuleCount:^(int64_t count) {	×
118	staticRuleCount = count;	×
119	}];	×
120
121	// Sync status
122	__block NSDate *fullSyncLastSuccess;	×
123	[rop fullSyncLastSuccess:^(NSDate *date) {	×
124	fullSyncLastSuccess = date;	×
125	}];	×
126
127	__block NSDate *ruleSyncLastSuccess;	×
128	[rop ruleSyncLastSuccess:^(NSDate *date) {	×
129	ruleSyncLastSuccess = date;	×
130	}];	×
131
132	__block BOOL syncCleanReqd = NO;	×
133	[rop syncCleanRequired:^(BOOL clean) {	×
134	syncCleanReqd = clean;	×
135	}];	×
136
137	__block BOOL pushNotifications = NO;	×
138	if ([[SNTConfigurator configurator] syncBaseURL]) {	×
139	[rop pushNotifications:^(BOOL response) {	×
140	pushNotifications = response;	×
141	}];	×
142	}	×
143
144	__block BOOL enableBundles = NO;	×
145	if ([[SNTConfigurator configurator] syncBaseURL]) {	×
146	[rop enableBundles:^(BOOL response) {	×
147	enableBundles = response;	×
148	}];	×
149	}	×
150
151	__block BOOL enableTransitiveRules = NO;	×
152	[rop enableTransitiveRules:^(BOOL response) {	×
153	enableTransitiveRules = response;	×
154	}];	×
155
156	__block BOOL watchItemsEnabled = NO;	×
157	__block uint64_t watchItemsRuleCount = 0;	×
158	__block NSString *watchItemsPolicyVersion = nil;	×
159	__block NSString *watchItemsConfigPath = nil;	×
160	__block NSTimeInterval watchItemsLastUpdateEpoch = 0;	×
161	[rop watchItemsState:^(BOOL enabled, uint64_t ruleCount, NSString *policyVersion,	×
162	NSString *configPath, NSTimeInterval lastUpdateEpoch) {	×
163	watchItemsEnabled = enabled;	×
164	if (enabled) {	×
165	watchItemsRuleCount = ruleCount;	×
166	watchItemsPolicyVersion = policyVersion;	×
167	watchItemsConfigPath = configPath;	×
168	watchItemsLastUpdateEpoch = lastUpdateEpoch;	×
169	}	×
170	}];	×
171
172	// Wait a maximum of 5s for stats collected from daemon to arrive.
173	if (dispatch_group_wait(group, dispatch_time(DISPATCH_TIME_NOW, NSEC_PER_SEC * 5))) {	×
174	fprintf(stderr, "Failed to retrieve some stats from daemon\n\n");	×
175	}	×
176
177	// Format dates
178	NSDateFormatter *dateFormatter = [[NSDateFormatter alloc] init];	×
179	dateFormatter.dateFormat = @"yyyy/MM/dd HH:mm:ss Z";	×
180	NSString *fullSyncLastSuccessStr = [dateFormatter stringFromDate:fullSyncLastSuccess] ?: @"Never";	×
181	NSString *ruleSyncLastSuccessStr =	×
182	[dateFormatter stringFromDate:ruleSyncLastSuccess] ?: fullSyncLastSuccessStr;	×
183
184	NSString *watchItemsLastUpdateStr =	×
185	[dateFormatter stringFromDate:[NSDate dateWithTimeIntervalSince1970:watchItemsLastUpdateEpoch]]	×
186	?: @"Never";	×
187
188	NSString *syncURLStr = configurator.syncBaseURL.absoluteString;	×
189
190	BOOL exportMetrics = configurator.exportMetrics;	×
191	NSURL *metricsURLStr = configurator.metricURL;	×
192	NSUInteger metricExportInterval = configurator.metricExportInterval;	×
193
194	if ([arguments containsObject:@"--json"]) {	×
195	NSMutableDictionary *stats = [@{	×
196	@"daemon" : @{	×
197	@"driver_connected" : @(YES),	×
198	@"mode" : clientMode ?: @"null",	×
199	@"log_type" : eventLogType,	×
200	@"file_logging" : @(fileLogging),	×
201	@"watchdog_cpu_events" : @(cpuEvents),	×
202	@"watchdog_ram_events" : @(ramEvents),	×
203	@"watchdog_cpu_peak" : @(cpuPeak),	×
204	@"watchdog_ram_peak" : @(ramPeak),	×
205	@"block_usb" : @(configurator.blockUSBMount),	×
206	@"remount_usb_mode" : (configurator.blockUSBMount && configurator.remountUSBMode.count	×
207	? configurator.remountUSBMode	×
208	: @""),	×
NEW 209	@"on_start_usb_options" : StartupOptionToString(configurator.onStartUSBOptions),	×
210	},	×
211	@"database" : @{	×
212	@"binary_rules" : @(binaryRuleCount),	×
213	@"certificate_rules" : @(certRuleCount),	×
214	@"teamid_rules" : @(teamIDRuleCount),	×
215	@"signingid_rules" : @(signingIDRuleCount),	×
216	@"compiler_rules" : @(compilerRuleCount),	×
217	@"transitive_rules" : @(transitiveRuleCount),	×
218	@"events_pending_upload" : @(eventCount),	×
219	},	×
220	@"static_rules" : @{	×
221	@"rule_count" : @(staticRuleCount),	×
222	},	×
223	@"sync" : @{	×
224	@"server" : syncURLStr ?: @"null",	×
225	@"clean_required" : @(syncCleanReqd),	×
226	@"last_successful_full" : fullSyncLastSuccessStr ?: @"null",	×
227	@"last_successful_rule" : ruleSyncLastSuccessStr ?: @"null",	×
228	@"push_notifications" : pushNotifications ? @"Connected" : @"Disconnected",	×
229	@"bundle_scanning" : @(enableBundles),	×
230	@"transitive_rules" : @(enableTransitiveRules),	×
231	},	×
232	} mutableCopy];	×
233
234	NSDictionary *watchItems;	×
235	if (watchItemsEnabled) {	×
236	watchItems = @{	×
237	@"enabled" : @(watchItemsEnabled),	×
238	@"rule_count" : @(watchItemsRuleCount),	×
239	@"policy_version" : watchItemsPolicyVersion,	×
240	@"config_path" : watchItemsConfigPath ?: @"null",	×
241	@"last_policy_update" : watchItemsLastUpdateStr ?: @"null",	×
242	};	×
243	} else {	×
244	watchItems = @{	×
245	@"enabled" : @(watchItemsEnabled),	×
246	};	×
247	}	×
248	stats[@"watch_items"] = watchItems;	×
249
250	stats[@"cache"] = @{	×
251	@"root_cache_count" : @(rootCacheCount),	×
252	@"non_root_cache_count" : @(nonRootCacheCount),	×
253	};	×
254
255	NSData *statsData = [NSJSONSerialization dataWithJSONObject:stats	×
256	options:NSJSONWritingPrettyPrinted	×
257	error:nil];	×
258	NSString *statsStr = [[NSString alloc] initWithData:statsData encoding:NSUTF8StringEncoding];	×
259	printf("%s\n", [statsStr UTF8String]);	×
260	} else {	×
261	printf(">>> Daemon Info\n");	×
262	printf(" %-25s \| %s\n", "Mode", [clientMode UTF8String]);	×
263	printf(" %-25s \| %s\n", "Log Type", [eventLogType UTF8String]);	×
264	printf(" %-25s \| %s\n", "File Logging", (fileLogging ? "Yes" : "No"));	×
265	printf(" %-25s \| %s\n", "USB Blocking", (configurator.blockUSBMount ? "Yes" : "No"));	×
266	if (configurator.blockUSBMount && configurator.remountUSBMode.count > 0) {	×
NEW 267	printf(" %-25s \| %s\n", "USB Remounting Mode",	×
268	[[configurator.remountUSBMode componentsJoinedByString:@", "] UTF8String]);	×
269	}	×
NEW 270	printf(" %-25s \| %s\n", "On Start USB Options", StartupOptionToString(configurator.onStartUSBOptions).UTF8String);	×
271	printf(" %-25s \| %lld (Peak: %.2f%%)\n", "Watchdog CPU Events", cpuEvents, cpuPeak);	×
272	printf(" %-25s \| %lld (Peak: %.2fMB)\n", "Watchdog RAM Events", ramEvents, ramPeak);	×
273
274	printf(">>> Cache Info\n");	×
275	printf(" %-25s \| %lld\n", "Root cache count", rootCacheCount);	×
276	printf(" %-25s \| %lld\n", "Non-root cache count", nonRootCacheCount);	×
277
278	printf(">>> Database Info\n");	×
279	printf(" %-25s \| %lld\n", "Binary Rules", binaryRuleCount);	×
280	printf(" %-25s \| %lld\n", "Certificate Rules", certRuleCount);	×
281	printf(" %-25s \| %lld\n", "TeamID Rules", teamIDRuleCount);	×
282	printf(" %-25s \| %lld\n", "SigningID Rules", signingIDRuleCount);	×
283	printf(" %-25s \| %lld\n", "Compiler Rules", compilerRuleCount);	×
284	printf(" %-25s \| %lld\n", "Transitive Rules", transitiveRuleCount);	×
285	printf(" %-25s \| %lld\n", "Events Pending Upload", eventCount);	×
286
287	if ([SNTConfigurator configurator].staticRules.count) {	×
288	printf(">>> Static Rules\n");	×
289	printf(" %-25s \| %lld\n", "Rules", staticRuleCount);	×
290	}	×
291
292	printf(">>> Watch Items\n");	×
293	printf(" %-25s \| %s\n", "Enabled", (watchItemsEnabled ? "Yes" : "No"));	×
294	if (watchItemsEnabled) {	×
295	printf(" %-25s \| %s\n", "Policy Version", watchItemsPolicyVersion.UTF8String);	×
296	printf(" %-25s \| %llu\n", "Rule Count", watchItemsRuleCount);	×
297	printf(" %-25s \| %s\n", "Config Path", (watchItemsConfigPath ?: @"(embedded)").UTF8String);	×
298	printf(" %-25s \| %s\n", "Last Policy Update", watchItemsLastUpdateStr.UTF8String);	×
299	}	×
300
301	if (syncURLStr) {	×
302	printf(">>> Sync Info\n");	×
303	printf(" %-25s \| %s\n", "Sync Server", [syncURLStr UTF8String]);	×
304	printf(" %-25s \| %s\n", "Clean Sync Required", (syncCleanReqd ? "Yes" : "No"));	×
305	printf(" %-25s \| %s\n", "Last Successful Full Sync", [fullSyncLastSuccessStr UTF8String]);	×
306	printf(" %-25s \| %s\n", "Last Successful Rule Sync", [ruleSyncLastSuccessStr UTF8String]);	×
307	printf(" %-25s \| %s\n", "Push Notifications",	×
308	(pushNotifications ? "Connected" : "Disconnected"));	×
309	printf(" %-25s \| %s\n", "Bundle Scanning", (enableBundles ? "Yes" : "No"));	×
310	printf(" %-25s \| %s\n", "Transitive Rules", (enableTransitiveRules ? "Yes" : "No"));	×
311	}	×
312
313	if (exportMetrics) {	×
314	printf(">>> Metrics Info\n");	×
315	printf(" %-25s \| %s\n", "Metrics Server", [[metricsURLStr absoluteString] UTF8String]);	×
316	printf(" %-25s \| %lu\n", "Export Interval (seconds)", metricExportInterval);	×
317	}	×
318	}	×
319
320	exit(0);	×
321	}	×
322
323	@end

google / santa / 6739774760

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous