mirror of
https://github.com/google/santa.git
synced 2026-04-24 03:00:12 -04:00
197109a8ee
* USB mass storage blocking. * Add the sync service and config key for enabling mass USB storage blocking * Update docs with the sync service key * Add ability to forcibly remount USBs with different flags * update EndpointSecurityTestUtil and tests that use it to properly handle multiple ES clients
85 lines
3.0 KiB
Objective-C
85 lines
3.0 KiB
Objective-C
/// Copyright 2015 Google Inc. All rights reserved.
|
|
///
|
|
/// Licensed under the Apache License, Version 2.0 (the "License");
|
|
/// you may not use this file except in compliance with the License.
|
|
/// You may obtain a copy of the License at
|
|
///
|
|
/// http://www.apache.org/licenses/LICENSE-2.0
|
|
///
|
|
/// Unless required by applicable law or agreed to in writing, software
|
|
/// distributed under the License is distributed on an "AS IS" BASIS,
|
|
/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
/// See the License for the specific language governing permissions and
|
|
/// limitations under the License.
|
|
|
|
#import "Source/santasyncservice/SNTSyncPostflight.h"
|
|
|
|
#import <MOLXPCConnection/MOLXPCConnection.h>
|
|
|
|
#import "Source/common/SNTLogging.h"
|
|
#import "Source/common/SNTXPCControlInterface.h"
|
|
#import "Source/santasyncservice/SNTSyncConstants.h"
|
|
#import "Source/santasyncservice/SNTSyncState.h"
|
|
|
|
@implementation SNTSyncPostflight
|
|
|
|
- (NSURL *)stageURL {
|
|
NSString *stageName = [@"postflight" stringByAppendingFormat:@"/%@", self.syncState.machineID];
|
|
return [NSURL URLWithString:stageName relativeToURL:self.syncState.syncBaseURL];
|
|
}
|
|
|
|
- (BOOL)sync {
|
|
[self performRequest:[self requestWithDictionary:nil]];
|
|
|
|
dispatch_group_t group = dispatch_group_create();
|
|
void (^replyBlock)(void) = ^{
|
|
dispatch_group_leave(group);
|
|
};
|
|
|
|
// Set client mode if it changed
|
|
if (self.syncState.clientMode) {
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setClientMode:self.syncState.clientMode reply:replyBlock];
|
|
}
|
|
|
|
// Remove clean sync flag if we did a clean sync
|
|
if (self.syncState.cleanSync) {
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setSyncCleanRequired:NO reply:replyBlock];
|
|
}
|
|
|
|
// Update allowlist/blocklist regexes
|
|
if (self.syncState.allowlistRegex) {
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setAllowedPathRegex:self.syncState.allowlistRegex
|
|
reply:replyBlock];
|
|
}
|
|
if (self.syncState.blocklistRegex) {
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setBlockedPathRegex:self.syncState.blocklistRegex
|
|
reply:replyBlock];
|
|
}
|
|
|
|
if (self.syncState.blockUSBMount) {
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setBlockUSBMount:self.syncState.blockUSBMount
|
|
reply:replyBlock];
|
|
}
|
|
if (self.syncState.remountUSBMode) {
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setRemountUSBMode:self.syncState.remountUSBMode
|
|
reply:replyBlock];
|
|
}
|
|
|
|
// Update last sync success
|
|
dispatch_group_enter(group);
|
|
[[self.daemonConn remoteObjectProxy] setFullSyncLastSuccess:[NSDate date] reply:replyBlock];
|
|
|
|
// Wait for dispatch group
|
|
dispatch_group_wait(group, dispatch_time(DISPATCH_TIME_NOW, 5 * NSEC_PER_SEC));
|
|
|
|
return YES;
|
|
}
|
|
|
|
@end
|