1 /*
2 * Copyright (c) 2023-2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "disable_usb_plugin.h"
17
18 #include "bool_serializer.h"
19 #include "edm_constants.h"
20 #include "edm_ipc_interface_code.h"
21 #include "edm_utils.h"
22 #include "usb_policy_utils.h"
23 #include "iplugin_manager.h"
24
25 namespace OHOS {
26 namespace EDM {
27 const bool REGISTER_RESULT = IPluginManager::GetInstance()->AddPlugin(DisableUsbPlugin::GetPlugin());
28
InitPlugin(std::shared_ptr<IPluginTemplate<DisableUsbPlugin,bool>> ptr)29 void DisableUsbPlugin::InitPlugin(std::shared_ptr<IPluginTemplate<DisableUsbPlugin, bool>> ptr)
30 {
31 EDMLOGI("DisableUsbPlugin InitPlugin...");
32 std::map<std::string, std::map<IPlugin::PermissionType, std::string>> tagPermissions;
33 std::map<IPlugin::PermissionType, std::string> typePermissionsForTag11;
34 std::map<IPlugin::PermissionType, std::string> typePermissionsForTag12;
35 typePermissionsForTag11.emplace(IPlugin::PermissionType::SUPER_DEVICE_ADMIN,
36 EdmPermission::PERMISSION_ENTERPRISE_MANAGE_USB);
37 typePermissionsForTag12.emplace(IPlugin::PermissionType::SUPER_DEVICE_ADMIN,
38 EdmPermission::PERMISSION_ENTERPRISE_MANAGE_RESTRICTIONS);
39 typePermissionsForTag12.emplace(IPlugin::PermissionType::BYOD_DEVICE_ADMIN,
40 EdmPermission::PERMISSION_PERSONAL_MANAGE_RESTRICTIONS);
41 tagPermissions.emplace(EdmConstants::PERMISSION_TAG_VERSION_11, typePermissionsForTag11);
42 tagPermissions.emplace(EdmConstants::PERMISSION_TAG_VERSION_12, typePermissionsForTag12);
43
44 IPlugin::PolicyPermissionConfig config = IPlugin::PolicyPermissionConfig(tagPermissions, IPlugin::ApiType::PUBLIC);
45 ptr->InitAttribute(EdmInterfaceCode::DISABLE_USB, "disable_usb", config, true);
46 ptr->SetSerializer(BoolSerializer::GetInstance());
47 ptr->SetOnHandlePolicyListener(&DisableUsbPlugin::OnSetPolicy, FuncOperateType::SET);
48 ptr->SetOnAdminRemoveListener(&DisableUsbPlugin::OnAdminRemove);
49 }
50
SetOtherModulePolicy(bool data)51 ErrCode DisableUsbPlugin::SetOtherModulePolicy(bool data)
52 {
53 EDMLOGI("DisableUsbPlugin OnSetPolicy...disable = %{public}d", data);
54 if (data && HasConflictPolicy()) {
55 return EdmReturnErrCode::CONFIGURATION_CONFLICT_FAILED;
56 }
57 if (FAILED(UsbPolicyUtils::SetUsbDisabled(data))) {
58 return EdmReturnErrCode::SYSTEM_ABNORMALLY;
59 }
60 return ERR_OK;
61 }
62
HasConflictPolicy()63 bool DisableUsbPlugin::HasConflictPolicy()
64 {
65 auto policyManager = IPolicyManager::GetInstance();
66 std::string allowUsbDevice;
67 policyManager->GetPolicy("", "allowed_usb_devices", allowUsbDevice);
68 if (!allowUsbDevice.empty()) {
69 EDMLOGE("DisableUsbPlugin POLICY CONFLICT! allowedUsbDevice: %{public}s", allowUsbDevice.c_str());
70 return true;
71 }
72 std::string disallowUsbDevice;
73 policyManager->GetPolicy("", "disallowed_usb_devices", disallowUsbDevice);
74 if (!disallowUsbDevice.empty()) {
75 EDMLOGE("DisableUsbPlugin POLICY CONFLICT! disallowUsbDevice: %{public}s", disallowUsbDevice.c_str());
76 return true;
77 }
78 std::string usbStoragePolicy;
79 policyManager->GetPolicy("", "usb_read_only", usbStoragePolicy);
80 if (usbStoragePolicy == std::to_string(EdmConstants::STORAGE_USB_POLICY_DISABLED) ||
81 usbStoragePolicy == std::to_string(EdmConstants::STORAGE_USB_POLICY_READ_ONLY)) {
82 EDMLOGE("DisableUsbPlugin POLICY CONFLICT! usbStoragePolicy: %{public}s", usbStoragePolicy.c_str());
83 return true;
84 }
85 return false;
86 }
87
RemoveOtherModulePolicy()88 ErrCode DisableUsbPlugin::RemoveOtherModulePolicy()
89 {
90 return UsbPolicyUtils::SetUsbDisabled(true);
91 }
92 } // namespace EDM
93 } // namespace OHOS
94