1 /* 2 * Copyright (C) 2014 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 #ifndef _STRICT_CONTROLLER_H 18 #define _STRICT_CONTROLLER_H 19 20 #include <string> 21 22 #include "NetdConstants.h" 23 24 enum StrictPenalty { INVALID, ACCEPT, LOG, REJECT }; 25 26 /* 27 * Help apps catch unwanted low-level networking behavior, like 28 * connections not wrapped in TLS. 29 */ 30 class StrictController { 31 public: 32 StrictController(); 33 34 int setupIptablesHooks(void); 35 int resetChains(void); 36 37 int setUidCleartextPenalty(uid_t, StrictPenalty); 38 39 static const char* LOCAL_OUTPUT; 40 static const char* LOCAL_CLEAR_DETECT; 41 static const char* LOCAL_CLEAR_CAUGHT; 42 static const char* LOCAL_PENALTY_LOG; 43 static const char* LOCAL_PENALTY_REJECT; 44 std::mutex lock; 45 46 protected: 47 // For testing. 48 friend class StrictControllerTest; 49 static int (*execIptablesRestore)(IptablesTarget target, const std::string& commands); 50 }; 51 52 #endif 53