secagentd/daemon.h

// Copyright 2022 The ChromiumOS Authors.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef SECAGENTD_DAEMON_H_
#define SECAGENTD_DAEMON_H_

#include <absl/status/status.h>
#include <base/memory/weak_ptr.h>
#include <base/timer/timer.h>
#include <brillo/daemons/dbus_daemon.h>
#include <memory>
#include <vector>

#include "secagentd/factories.h"
#include "secagentd/plugins.h"

namespace secagentd {

// The secagentd main daemon.
// On startup the device policy is fetched. Based on the security collection
// policies certain BPFs will be loaded and attached.
// These BPFs will produce security events that are collected by this daemon,
// which are packaged into protobuffs and sent to missived for delivery
// to an off-machine service.

class Daemon : public brillo::DBusDaemon {
  struct Inject {
    std::unique_ptr<BpfPluginFactoryInterface> bpf_plugin_factory_;
  };

 public:
  Daemon() = default;
  /* dependency injection for unit tests */
  explicit Daemon(struct Inject);
  ~Daemon() override = default;

 protected:
  int OnInit() override;
  int OnEventLoopStarted() override;
  void HandleBpfEvents(const bpf::event& bpf_event);
  int CreateAndRunBpfPlugins();
  int CreateAndRunAgentPlugins();
  void HeartBeat();
  void SendMetricReport();

 private:
  base::RepeatingTimer heart_beat_;
  base::RepeatingTimer send_report_;
  std::unique_ptr<BpfPluginFactoryInterface> bpf_plugin_factory_;
  std::vector<std::unique_ptr<PluginInterface>> bpf_plugins_;
};
};  // namespace secagentd

#endif  // SECAGENTD_DAEMON_H_