1 /* 2 * Copyright (C) 2022 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 * 16 */ 17 18 #pragma once 19 20 #include <android-base/thread_annotations.h> 21 #include <bpf/BpfMap.h> 22 #include "netd.h" 23 24 using android::base::Result; 25 using android::bpf::BpfMap; 26 27 class Firewall { 28 public: 29 Firewall() EXCLUDES(mMutex); 30 static Firewall* getInstance(); 31 Result<void> toggleStandbyMatch(bool enable) EXCLUDES(mMutex); 32 Result<void> addRule(uint32_t uid, UidOwnerMatchType match, uint32_t iif = 0) EXCLUDES(mMutex); 33 Result<void> removeRule(uint32_t uid, UidOwnerMatchType match) EXCLUDES(mMutex); 34 Result<void> addUidInterfaceRules(const std::string& ifName, const std::vector<int32_t>& uids); 35 Result<void> removeUidInterfaceRules(const std::vector<int32_t>& uids); 36 37 private: 38 BpfMap<uint32_t, uint32_t> mConfigurationMap GUARDED_BY(mMutex); 39 BpfMap<uint32_t, UidOwnerValue> mUidOwnerMap GUARDED_BY(mMutex); 40 std::mutex mMutex; 41 }; 42