Check access and validation of centralized configuration files

[sdvendramini]

Description

It is necessary to verify that the file writing and YAML format validation functions are thread-safe to prevent potential race conditions. These functions are used in centralized configuration.

• Download
  

  wazuh-agent/src/agent/communicator/src/communicator.cpp

  Lines 225 to 258 in ca4f4b7

  	boost::asio::awaitable<bool> Communicator::GetGroupConfigurationFromManager(std::string groupName,
  	std::string dstFilePath)
  	{
  	auto onAuthenticationFailed = [this]()
  	{
  	TryReAuthenticate();
  	};
  	bool downloaded = false;
  	auto onSuccess = [path = std::move(dstFilePath), &downloaded](const int, const std::string& res)
  	{
  	std::ofstream file(path, std::ios::binary);
  	if (file)
  	{
  	file << res;
  	file.close();
  	downloaded = true;
  	}
  	};
  	const auto reqParams = http_client::HttpRequestParams(boost::beast::http::verb::get,
  	m_serverUrl,
  	"/api/v1/files?file_name=" + groupName +
  	config::DEFAULT_SHARED_FILE_EXTENSION,
  	m_getHeaderInfo ? m_getHeaderInfo() : "",
  	m_verificationMode,
  	*m_token);
  	co_await m_httpClient->Co_PerformHttpRequest(
  	m_token, reqParams, {}, onAuthenticationFailed, m_retryInterval, m_batchSize, onSuccess, {});
  	co_return downloaded;
  	}

• Validation
  

  wazuh-agent/src/agent/configuration_parser/src/configuration_parser.cpp

  Lines 115 to 130 in ca4f4b7

  	bool ConfigurationParser::isValidYamlFile(const std::filesystem::path& configFile) const
  	{
  	try
  	{
  	YAML::Node mapToValidte = YAML::LoadFile(configFile.string());
  	if (!mapToValidte.IsMap() && !mapToValidte.IsSequence())
  	{
  	throw std::runtime_error("The file does not contain a valid YAML structure.");
  	}
  	return true;
  	}
  	catch (const std::exception&)
  	{
  	return false;
  	}
  	}