android-16.0.0_r2/s

/*
 * Copyright (C) 2018 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.android.role;

import android.annotation.CheckResult;
import android.annotation.NonNull;
import android.annotation.Nullable;
import android.annotation.UserIdInt;
import android.annotation.WorkerThread;
import android.os.Build;
import android.os.Handler;
import android.os.UserHandle;
import android.permission.internal.compat.UserHandleCompat;
import android.util.ArrayMap;
import android.util.ArraySet;
import android.util.Log;

import androidx.annotation.RequiresApi;

import com.android.internal.annotations.GuardedBy;
import com.android.internal.util.dump.DualDumpOutputStream;
import com.android.modules.utils.BackgroundThread;
import com.android.permission.util.CollectionUtils;
import com.android.role.persistence.RolesPersistence;
import com.android.role.persistence.RolesState;
import com.android.server.role.RoleServicePlatformHelper;

import java.util.ArrayList;
import java.util.Collections;
import java.util.List;
import java.util.Map;
import java.util.Objects;
import java.util.Set;

/**
 * Stores the state of roles for a user.
 */
@RequiresApi(Build.VERSION_CODES.S)
class RoleUserState {
    private static final String LOG_TAG = RoleUserState.class.getSimpleName();

    public static final int VERSION_UNDEFINED = -1;

    public static final int VERSION_FALLBACK_STATE_MIGRATED = 1;

    private static final long WRITE_DELAY_MILLIS = 200;

    private final RolesPersistence mPersistence = RolesPersistence.createInstance();

    @UserIdInt
    private final int mUserId;

    @NonNull
    private final RoleServicePlatformHelper mPlatformHelper;

    @NonNull
    private final Callback mCallback;

    @NonNull
    private final Object mLock = new Object();

    @GuardedBy("mLock")
    private int mVersion = VERSION_UNDEFINED;

    @GuardedBy("mLock")
    @Nullable
    private String mPackagesHash;

    @GuardedBy("mLock")
    private boolean mBypassingRoleQualification;

    /**
     * Maps role names to its holders' package names. The values should never be null.
     */
    @GuardedBy("mLock")
    @NonNull
    private ArrayMap<String, ArraySet<String>> mRoles = new ArrayMap<>();

    /**
     * Role names of the roles with fallback enabled.
     */
    @GuardedBy("mLock")
    @NonNull
    private ArraySet<String> mFallbackEnabledRoles = new ArraySet<>();

    @GuardedBy("mLock")
    @NonNull
    private ArrayMap<String, Integer> mActiveUserIds = new ArrayMap<>();

    @GuardedBy("mLock")
    @NonNull
    private final Map<String, List<String>> mDefaultHoldersForTest = new ArrayMap<>();

    @GuardedBy("mLock")
    @NonNull
    private final Set<String> mRolesVisibleForTest = new ArraySet<>();

    @GuardedBy("mLock")
    private boolean mWriteScheduled;

    @GuardedBy("mLock")
    private boolean mDestroyed;

    @NonNull
    private final Handler mWriteHandler = new Handler(BackgroundThread.get().getLooper());

    /**
     * Create a new user state, and read its state from disk if previously persisted.
     *
     * @param userId the user id for this user state
     * @param platformHelper the platform helper
     * @param callback the callback for this user state
     * @param bypassingRoleQualification whether role qualification is being bypassed
     */
    public RoleUserState(@UserIdInt int userId, @NonNull RoleServicePlatformHelper platformHelper,
            @NonNull Callback callback, boolean bypassingRoleQualification) {
        mUserId = userId;
        mPlatformHelper = platformHelper;
        mCallback = callback;

        synchronized (mLock) {
            mBypassingRoleQualification = bypassingRoleQualification;
        }

        readFile();
    }

    /**
     * Get the version of this user state.
     */
    public int getVersion() {
        synchronized (mLock) {
            return mVersion;
        }
    }

    /**
     * Set the version of this user state.
     *
     * @param version the version to set
     */
    public void setVersion(int version) {
        synchronized (mLock) {
            if (mVersion == version) {
                return;
            }
            mVersion = version;
            scheduleWriteFileLocked();
        }
    }

    /**
     * Checks the version and returns whether a version upgrade is needed.
     */
    public boolean isVersionUpgradeNeeded() {
        synchronized (mLock) {
            return mVersion < VERSION_FALLBACK_STATE_MIGRATED;
        }
    }

    /**
     * Get the hash representing the state of packages during the last time initial grants was run.
     *
     * @return the hash representing the state of packages
     */
    @Nullable
    public String getPackagesHash() {
        synchronized (mLock) {
            return mPackagesHash;
        }
    }

    /**
     * Set the hash representing the state of packages during the last time initial grants was run.
     *
     * @param packagesHash the hash representing the state of packages
     */
    public void setPackagesHash(@Nullable String packagesHash) {
        synchronized (mLock) {
            if (Objects.equals(mPackagesHash, packagesHash)) {
                return;
            }
            mPackagesHash = packagesHash;
            scheduleWriteFileLocked();
        }
    }

    /**
     * Check whether role qualifications is being bypassed.
     *
     * @return whether role qualifications is being bypassed
     */
    public boolean isBypassingRoleQualification() {
        synchronized (mLock) {
            return mBypassingRoleQualification;
        }
    }

    /**
     * Set whether role qualifications is being bypassed.
     *
     * @param bypassingRoleQualification whether role qualifications is being bypassed
     */
    public void setBypassingRoleQualification(boolean bypassingRoleQualification) {
        synchronized (mLock) {
            if (mBypassingRoleQualification == bypassingRoleQualification) {
                return;
            }
            mBypassingRoleQualification = bypassingRoleQualification;
            scheduleWriteFileLocked();
        }
    }

    public boolean isFallbackEnabled(@NonNull String roleName) {
        synchronized (mLock) {
            return mFallbackEnabledRoles.contains(roleName);
        }
    }

    public void setFallbackEnabled(@NonNull String roleName, boolean fallbackEnabled) {
        synchronized (mLock) {
            if (!mRoles.containsKey(roleName)) {
                Log.e(LOG_TAG, "Cannot set fallback enabled for unknown role, role: " + roleName
                        + ", fallbackEnabled: " + fallbackEnabled);
                return;
            }
            if (mFallbackEnabledRoles.contains(roleName) == fallbackEnabled) {
                return;
            }
            if (fallbackEnabled) {
                mFallbackEnabledRoles.add(roleName);
            } else {
                mFallbackEnabledRoles.remove(roleName);
            }
            scheduleWriteFileLocked();
        }
    }

    /**
     * Upgrade this user state to the latest version if needed.
     */
    public void upgradeVersion(@NonNull List<String> legacyFallbackDisabledRoles) {
        synchronized (mLock) {
            if (mVersion < VERSION_FALLBACK_STATE_MIGRATED) {
                mFallbackEnabledRoles.addAll(mRoles.keySet());
                int legacyFallbackDisabledRolesSize = legacyFallbackDisabledRoles.size();
                for (int i = 0; i < legacyFallbackDisabledRolesSize; i++) {
                    String roleName = legacyFallbackDisabledRoles.get(i);
                    mFallbackEnabledRoles.remove(roleName);
                }
                Log.v(LOG_TAG, "Migrated fallback enabled roles: " + mFallbackEnabledRoles);
                mVersion = VERSION_FALLBACK_STATE_MIGRATED;
                scheduleWriteFileLocked();
            }
        }
    }

    /**
     * Get whether the role is available.
     *
     * @param roleName the name of the role to get the holders for
     *
     * @return whether the role is available
     */
    public boolean isRoleAvailable(@NonNull String roleName) {
        synchronized (mLock) {
            return mRoles.containsKey(roleName);
        }
    }

    /**
     * Get the holders of a role.
     *
     * @param roleName the name of the role to query for
     *
     * @return the set of role holders, or {@code null} if and only if the role is not found
     */
    @Nullable
    public ArraySet<String> getRoleHolders(@NonNull String roleName) {
        synchronized (mLock) {
            ArraySet<String> packageNames = mRoles.get(roleName);
            if (packageNames == null) {
                return null;
            }
            return new ArraySet<>(packageNames);
        }
    }

    /**
     * Adds the given role, effectively marking it as {@link #isRoleAvailable available}
     *
     * @param roleName the name of the role
     *
     * @return whether any changes were made
     */
    public boolean addRoleName(@NonNull String roleName) {
        synchronized (mLock) {
            if (!mRoles.containsKey(roleName)) {
                mRoles.put(roleName, new ArraySet<>());
                mFallbackEnabledRoles.add(roleName);
                Log.i(LOG_TAG, "Added new role: " + roleName);
                scheduleWriteFileLocked();
                return true;
            } else {
                return false;
            }
        }
    }

    /**
     * Set the names of all available roles.
     *
     * @param roleNames the names of all the available roles
     */
    public void setRoleNames(@NonNull List<String> roleNames) {
        synchronized (mLock) {
            boolean changed = false;

            for (int i = mRoles.size() - 1; i >= 0; i--) {
                String roleName = mRoles.keyAt(i);

                if (!roleNames.contains(roleName)) {
                    ArraySet<String> packageNames = mRoles.valueAt(i);
                    if (!packageNames.isEmpty()) {
                        Log.e(LOG_TAG, "Holders of a removed role should have been cleaned up,"
                                + " role: " + roleName + ", holders: " + packageNames);
                    }
                    mRoles.removeAt(i);
                    mFallbackEnabledRoles.remove(roleName);
                    changed = true;
                }
            }

            int roleNamesSize = roleNames.size();
            for (int i = 0; i < roleNamesSize; i++) {
                changed |= addRoleName(roleNames.get(i));
            }

            if (changed) {
                scheduleWriteFileLocked();
            }
        }
    }

    /**
     * Add a holder to a role.
     *
     * @param roleName the name of the role to add the holder to
     * @param packageName the package name of the new holder
     *
     * @return {@code false} if and only if the role is not found
     */
    @CheckResult
    public boolean addRoleHolder(@NonNull String roleName, @NonNull String packageName) {
        boolean changed;

        synchronized (mLock) {
            ArraySet<String> roleHolders = mRoles.get(roleName);
            if (roleHolders == null) {
                Log.e(LOG_TAG, "Cannot add role holder for unknown role, role: " + roleName
                        + ", package: " + packageName);
                return false;
            }
            changed = roleHolders.add(packageName);
            if (changed) {
                scheduleWriteFileLocked();
            }
        }

        if (changed) {
            mCallback.onRoleHoldersChanged(roleName, mUserId);
        }
        return true;
    }

    /**
     * Remove a holder from a role.
     *
     * @param roleName the name of the role to remove the holder from
     * @param packageName the package name of the holder to remove
     *
     * @return {@code false} if and only if the role is not found
     */
    @CheckResult
    public boolean removeRoleHolder(@NonNull String roleName, @NonNull String packageName) {
        boolean changed;

        synchronized (mLock) {
            ArraySet<String> roleHolders = mRoles.get(roleName);
            if (roleHolders == null) {
                Log.e(LOG_TAG, "Cannot remove role holder for unknown role, role: " + roleName
                        + ", package: " + packageName);
                return false;
            }

            changed = roleHolders.remove(packageName);
            if (changed) {
                scheduleWriteFileLocked();
            }
        }

        if (changed) {
            mCallback.onRoleHoldersChanged(roleName, mUserId);
        }
        return true;
    }

    /**
     * @see android.app.role.RoleManager#getHeldRolesFromController
     */
    @NonNull
    public List<String> getHeldRoles(@NonNull String packageName) {
        synchronized (mLock) {
            List<String> roleNames = new ArrayList<>();
            int size = mRoles.size();
            for (int i = 0; i < size; i++) {
                if (mRoles.valueAt(i).contains(packageName)) {
                    roleNames.add(mRoles.keyAt(i));
                }
            }
            return roleNames;
        }
    }

    /**
     * Return the active user for the role
     *
     * @param roleName the name of the role to get the active user for
     */
    public int getActiveUserForRole(@NonNull String roleName) {
        synchronized (mLock) {
            return mActiveUserIds.getOrDefault(roleName, UserHandleCompat.USER_NULL);
        }
    }

    @NonNull
    public List<String> getActiveRolesForUser(@UserIdInt int userId) {
        synchronized (mLock) {
            List<String> activeRoleNames = new ArrayList<>();
            int activeUserIdsSize = mActiveUserIds.size();
            for (int i = 0; i < activeUserIdsSize; i++) {
                int activeUserId = mActiveUserIds.valueAt(i);
                if (activeUserId == userId) {
                    String roleName = mActiveUserIds.keyAt(i);
                    activeRoleNames.add(roleName);
                }
            }
            return activeRoleNames;
        }
    }

    /**
     * Set the active user for the role
     *
     * @param roleName the name of the role to set the active user for
     * @param userId User id to set as active for this role
     * @return whether any changes were made
     */
    public boolean setActiveUserForRole(@NonNull String roleName, @UserIdInt int userId) {
        if (!com.android.permission.flags.Flags.crossUserRoleEnabled()) {
            return false;
        }
        synchronized (mLock) {
            Integer currentActiveUserId = mActiveUserIds.get(roleName);
            // If we have pre-existing roles that weren't profile group exclusive and don't have an
            // active user, ensure we set and write value, and return modified, otherwise other
            // users might not have role holder revoked.
            if (currentActiveUserId != null && currentActiveUserId == userId) {
                return false;
            }
            mActiveUserIds.put(roleName, userId);
            scheduleWriteFileLocked();
            return true;
        }
    }

    @NonNull
    public List<String> getDefaultHoldersForTest(@NonNull String roleName) {
        synchronized (mLock) {
            return mDefaultHoldersForTest.getOrDefault(roleName, Collections.emptyList());
        }
    }

    public void setDefaultHoldersForTest(@NonNull String roleName,
            @NonNull List<String> packageNames) {
        synchronized (mLock) {
            mDefaultHoldersForTest.put(roleName, packageNames);
        }
    }

    public boolean isRoleVisibleForTest(@NonNull String roleName) {
        synchronized (mLock) {
            return mRolesVisibleForTest.contains(roleName);
        }
    }

    public void setRoleVisibleForTest(@NonNull String roleName, boolean visible) {
        synchronized (mLock) {
            if (visible) {
                mRolesVisibleForTest.add(roleName);
            } else {
                mRolesVisibleForTest.remove(roleName);
            }
        }
    }

    /**
     * Schedule writing the state to file.
     */
    @GuardedBy("mLock")
    private void scheduleWriteFileLocked() {
        if (mDestroyed) {
            return;
        }

        if (!mWriteScheduled) {
            mWriteHandler.postDelayed(this::writeFile, WRITE_DELAY_MILLIS);
            mWriteScheduled = true;
        }
    }

    @WorkerThread
    private void writeFile() {
        RolesState roles;
        synchronized (mLock) {
            if (mDestroyed) {
                return;
            }

            mWriteScheduled = false;

            // Force a reconciliation on next boot if we are bypassing role qualification now.
            String packagesHash = mBypassingRoleQualification ? null : mPackagesHash;
            if (com.android.permission.flags.Flags.crossUserRoleEnabled()) {
                roles = new RolesState(mVersion, packagesHash,
                        (Map<String, Set<String>>) (Map<String, ?>) snapshotRolesLocked(),
                        snapshotFallbackEnabledRoles(), snapshotActiveUserIds());
            } else {
                roles = new RolesState(mVersion, packagesHash,
                        (Map<String, Set<String>>) (Map<String, ?>) snapshotRolesLocked(),
                        snapshotFallbackEnabledRoles());
            }
        }

        mPersistence.writeForUser(roles, UserHandle.of(mUserId));
    }

    private void readFile() {
        synchronized (mLock) {
            RolesState roleState = mPersistence.readForUser(UserHandle.of(mUserId));

            Map<String, Set<String>> roles;
            Set<String> fallbackEnabledRoles;
            Map<String, Integer> activeUserIds;
            if (roleState != null) {
                mVersion = roleState.getVersion();
                mPackagesHash = roleState.getPackagesHash();
                roles = roleState.getRoles();
                fallbackEnabledRoles = roleState.getFallbackEnabledRoles();
                activeUserIds = roleState.getActiveUserIds();
            } else {
                roles = mPlatformHelper.getLegacyRoleState(mUserId);
                fallbackEnabledRoles = roles.keySet();
                activeUserIds = Collections.emptyMap();
            }
            mRoles.clear();
            for (Map.Entry<String, Set<String>> entry : roles.entrySet()) {
                String roleName = entry.getKey();
                ArraySet<String> roleHolders = new ArraySet<>(entry.getValue());
                mRoles.put(roleName, roleHolders);
            }
            mFallbackEnabledRoles.clear();
            mFallbackEnabledRoles.addAll(fallbackEnabledRoles);
            mActiveUserIds.clear();
            if (com.android.permission.flags.Flags.crossUserRoleEnabled()) {
                mActiveUserIds.putAll(activeUserIds);
            }
            if (roleState == null) {
                scheduleWriteFileLocked();
            }
        }
    }

    /**
     * Dump this user state.
     *
     * @param dumpOutputStream the output stream to dump to
     */
    public void dump(@NonNull DualDumpOutputStream dumpOutputStream, @NonNull String fieldName,
            long fieldId) {
        int version;
        String packagesHash;
        ArrayMap<String, ArraySet<String>> roles;
        ArrayMap<String, Integer> activeUserIds;
        ArraySet<String> fallbackEnabledRoles;
        synchronized (mLock) {
            version = mVersion;
            packagesHash = mPackagesHash;
            roles = snapshotRolesLocked();
            fallbackEnabledRoles = snapshotFallbackEnabledRoles();
            activeUserIds = snapshotActiveUserIds();
        }

        long fieldToken = dumpOutputStream.start(fieldName, fieldId);
        dumpOutputStream.write("user_id", RoleUserStateProto.USER_ID, mUserId);
        dumpOutputStream.write("version", RoleUserStateProto.VERSION, version);
        dumpOutputStream.write("packages_hash", RoleUserStateProto.PACKAGES_HASH, packagesHash);

        int rolesSize = roles.size();
        for (int rolesIndex = 0; rolesIndex < rolesSize; rolesIndex++) {
            String roleName = roles.keyAt(rolesIndex);
            ArraySet<String> roleHolders = roles.valueAt(rolesIndex);
            boolean fallbackEnabled = fallbackEnabledRoles.contains(roleName);
            Integer activeUserId = activeUserIds.get(roleName);

            long rolesToken = dumpOutputStream.start("roles", RoleUserStateProto.ROLES);
            dumpOutputStream.write("name", RoleProto.NAME, roleName);
            dumpOutputStream.write("fallback_enabled", RoleProto.FALLBACK_ENABLED, fallbackEnabled);
            if (activeUserId != null) {
                dumpOutputStream.write("active_user_id", RoleProto.ACTIVE_USER_ID, activeUserId);
            }
            int roleHoldersSize = roleHolders.size();
            for (int roleHoldersIndex = 0; roleHoldersIndex < roleHoldersSize; roleHoldersIndex++) {
                String roleHolder = roleHolders.valueAt(roleHoldersIndex);

                dumpOutputStream.write("holders", RoleProto.HOLDERS, roleHolder);
            }

            dumpOutputStream.end(rolesToken);
        }

        dumpOutputStream.end(fieldToken);
    }

    /**
     * Get the roles and their holders.
     *
     * @return A copy of the roles and their holders
     */
    @NonNull
    public ArrayMap<String, ArraySet<String>> getRolesAndHolders() {
        synchronized (mLock) {
            return snapshotRolesLocked();
        }
    }

    @GuardedBy("mLock")
    @NonNull
    private ArrayMap<String, ArraySet<String>> snapshotRolesLocked() {
        ArrayMap<String, ArraySet<String>> roles = new ArrayMap<>();
        for (int i = 0, size = CollectionUtils.size(mRoles); i < size; ++i) {
            String roleName = mRoles.keyAt(i);
            ArraySet<String> roleHolders = mRoles.valueAt(i);

            roleHolders = new ArraySet<>(roleHolders);
            roles.put(roleName, roleHolders);
        }
        return roles;
    }

    @GuardedBy("mLock")
    @NonNull
    private ArraySet<String> snapshotFallbackEnabledRoles() {
        return new ArraySet<>(mFallbackEnabledRoles);
    }

    @GuardedBy("mLock")
    @NonNull
    private ArrayMap<String, Integer> snapshotActiveUserIds() {
        return new ArrayMap<>(mActiveUserIds);
    }

    /**
     * Destroy this user state and delete the corresponding file. Any pending writes to the file
     * will be cancelled, and any future interaction with this state will throw an exception.
     */
    public void destroy() {
        synchronized (mLock) {
            if (mDestroyed) {
                throw new IllegalStateException("This RoleUserState has already been destroyed");
            }
            mWriteHandler.removeCallbacksAndMessages(null);
            mPersistence.deleteForUser(UserHandle.of(mUserId));
            mDestroyed = true;
        }
    }

    /**
     * Callback for a user state.
     */
    public interface Callback {

        /**
         * Called when the holders of roles are changed.
         *
         * @param roleName the name of the role whose holders are changed
         * @param userId the user id for this role holder change
         */
        void onRoleHoldersChanged(@NonNull String roleName, @UserIdInt int userId);
    }
}