1 /* 2 * Copyright 2014, The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 package com.android.managedprovisioning.task; 18 19 import android.app.AppGlobals; 20 import android.app.admin.DevicePolicyManager; 21 import android.content.ComponentName; 22 import android.content.Context; 23 import android.content.pm.IPackageManager; 24 import android.content.pm.PackageManager; 25 import android.os.RemoteException; 26 import android.os.UserHandle; 27 28 import com.android.managedprovisioning.ProvisionLogger; 29 import com.android.managedprovisioning.Utils; 30 31 /** 32 * This tasks sets a given component as the owner of the device. If provided it also sets a given 33 * component as the device initializer, which can perform additional setup steps at the end of 34 * provisioning before setting the device as provisioned. 35 */ 36 public class SetDevicePolicyTask { 37 public static final int ERROR_PACKAGE_NOT_INSTALLED = 0; 38 public static final int ERROR_NO_RECEIVER = 1; 39 public static final int ERROR_OTHER = 2; 40 41 private final Callback mCallback; 42 private final Context mContext; 43 private String mAdminPackage; 44 private ComponentName mAdminComponent; 45 private final String mOwnerName; 46 private ComponentName mInitializerComponent; 47 private String mInitializerPackageName; 48 49 private PackageManager mPackageManager; 50 private DevicePolicyManager mDevicePolicyManager; 51 SetDevicePolicyTask(Context context, String ownerName, ComponentName initializerComponent, Callback callback)52 public SetDevicePolicyTask(Context context, String ownerName, 53 ComponentName initializerComponent, Callback callback) { 54 mCallback = callback; 55 mContext = context; 56 mOwnerName = ownerName; 57 mInitializerComponent = initializerComponent; 58 if (mInitializerComponent != null) { 59 mInitializerPackageName = initializerComponent.getPackageName(); 60 } 61 62 mPackageManager = mContext.getPackageManager(); 63 mDevicePolicyManager = (DevicePolicyManager) mContext. 64 getSystemService(Context.DEVICE_POLICY_SERVICE); 65 } 66 run(ComponentName adminComponent)67 public void run(ComponentName adminComponent) { 68 try { 69 mAdminComponent = adminComponent; 70 mAdminPackage = mAdminComponent.getPackageName(); 71 72 enableDevicePolicyApp(mAdminPackage); 73 setActiveAdmin(mAdminComponent); 74 setDeviceOwner(mAdminPackage, mOwnerName); 75 76 if (mInitializerComponent != null) { 77 // For secondary users, set device owner package as profile owner as well, in order 78 // to give it DO/PO privileges. This only applies if device initializer is present. 79 if (!Utils.isCurrentUserOwner() && !Utils.isManagedProfile(mContext)) { 80 int userId = UserHandle.myUserId(); 81 if (!mDevicePolicyManager.setProfileOwner(mAdminComponent, mAdminPackage, 82 userId)) { 83 ProvisionLogger.loge("Fail to set profile owner for user " + userId); 84 mCallback.onError(ERROR_OTHER); 85 return; 86 } 87 } 88 enableDevicePolicyApp(mInitializerPackageName); 89 setActiveAdmin(mInitializerComponent); 90 if (!setDeviceInitializer(mInitializerComponent)) { 91 // error reported in setDeviceInitializer 92 return; 93 } 94 95 } 96 } catch (Exception e) { 97 ProvisionLogger.loge("Failure setting device owner or initializer", e); 98 mCallback.onError(ERROR_OTHER); 99 return; 100 } 101 102 mCallback.onSuccess(); 103 } 104 enableDevicePolicyApp(String packageName)105 private void enableDevicePolicyApp(String packageName) { 106 int enabledSetting = mPackageManager.getApplicationEnabledSetting(packageName); 107 if (enabledSetting != PackageManager.COMPONENT_ENABLED_STATE_DEFAULT) { 108 mPackageManager.setApplicationEnabledSetting(packageName, 109 PackageManager.COMPONENT_ENABLED_STATE_DEFAULT, 110 // Device policy app may have launched ManagedProvisioning, play nice and don't 111 // kill it as a side-effect of this call. 112 PackageManager.DONT_KILL_APP); 113 } 114 } 115 setActiveAdmin(ComponentName component)116 public void setActiveAdmin(ComponentName component) { 117 ProvisionLogger.logd("Setting " + component + " as active admin."); 118 mDevicePolicyManager.setActiveAdmin(component, true); 119 } 120 setDeviceOwner(String packageName, String owner)121 public void setDeviceOwner(String packageName, String owner) { 122 ProvisionLogger.logd("Setting " + packageName + " as device owner " + owner + "."); 123 if (!mDevicePolicyManager.isDeviceOwner(packageName)) { 124 mDevicePolicyManager.setDeviceOwner(packageName, owner); 125 } 126 } 127 setDeviceInitializer(ComponentName component)128 public boolean setDeviceInitializer(ComponentName component) { 129 ProvisionLogger.logd("Setting " + component + " as device initializer."); 130 if (!mDevicePolicyManager.isDeviceInitializerApp(component.getPackageName())) { 131 mDevicePolicyManager.setDeviceInitializer(null, component); 132 } 133 IPackageManager pm = AppGlobals.getPackageManager(); 134 try { 135 pm.setBlockUninstallForUser(component.getPackageName(), true, 136 UserHandle.getCallingUserId()); 137 } catch (RemoteException e) { 138 ProvisionLogger.loge("Failed to block uninstall of device initializer app", e); 139 mCallback.onError(ERROR_OTHER); 140 return false; 141 } 142 return true; 143 } 144 145 public abstract static class Callback { onSuccess()146 public abstract void onSuccess(); onError(int errorCode)147 public abstract void onError(int errorCode); 148 } 149 } 150