1 /*
2 * Copyright (C) 2005 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #define LOG_TAG "PermissionController"
18
19 #include <binder/IPermissionController.h>
20
21 #include <utils/Log.h>
22 #include <binder/Parcel.h>
23 #include <utils/String8.h>
24
25 #include <private/binder/Static.h>
26
27 namespace android {
28
29 // ----------------------------------------------------------------------
30
31 class BpPermissionController : public BpInterface<IPermissionController>
32 {
33 public:
BpPermissionController(const sp<IBinder> & impl)34 explicit BpPermissionController(const sp<IBinder>& impl)
35 : BpInterface<IPermissionController>(impl)
36 {
37 }
38
checkPermission(const String16 & permission,int32_t pid,int32_t uid)39 virtual bool checkPermission(const String16& permission, int32_t pid, int32_t uid)
40 {
41 Parcel data, reply;
42 data.writeInterfaceToken(IPermissionController::getInterfaceDescriptor());
43 data.writeString16(permission);
44 data.writeInt32(pid);
45 data.writeInt32(uid);
46 remote()->transact(CHECK_PERMISSION_TRANSACTION, data, &reply);
47 // fail on exception
48 if (reply.readExceptionCode() != 0) return 0;
49 return reply.readInt32() != 0;
50 }
51
noteOp(const String16 & op,int32_t uid,const String16 & packageName)52 virtual int32_t noteOp(const String16& op, int32_t uid, const String16& packageName)
53 {
54 Parcel data, reply;
55 data.writeInterfaceToken(IPermissionController::getInterfaceDescriptor());
56 data.writeString16(op);
57 data.writeInt32(uid);
58 data.writeString16(packageName);
59 remote()->transact(NOTE_OP_TRANSACTION, data, &reply);
60 // fail on exception
61 if (reply.readExceptionCode() != 0) return 2; // MODE_ERRORED
62 return reply.readInt32();
63 }
64
getPackagesForUid(const uid_t uid,Vector<String16> & packages)65 virtual void getPackagesForUid(const uid_t uid, Vector<String16>& packages)
66 {
67 Parcel data, reply;
68 data.writeInterfaceToken(IPermissionController::getInterfaceDescriptor());
69 data.writeInt32(uid);
70 remote()->transact(GET_PACKAGES_FOR_UID_TRANSACTION, data, &reply);
71 // fail on exception
72 if (reply.readExceptionCode() != 0) {
73 return;
74 }
75 const int32_t size = reply.readInt32();
76 if (size <= 0) {
77 return;
78 }
79 for (int i = 0; i < size; i++) {
80 packages.push(reply.readString16());
81 }
82 }
83
isRuntimePermission(const String16 & permission)84 virtual bool isRuntimePermission(const String16& permission)
85 {
86 Parcel data, reply;
87 data.writeInterfaceToken(IPermissionController::getInterfaceDescriptor());
88 data.writeString16(permission);
89 remote()->transact(IS_RUNTIME_PERMISSION_TRANSACTION, data, &reply);
90 // fail on exception
91 if (reply.readExceptionCode() != 0) return false;
92 return reply.readInt32() != 0;
93 }
94
getPackageUid(const String16 & package,int flags)95 virtual int getPackageUid(const String16& package, int flags)
96 {
97 Parcel data, reply;
98 data.writeInterfaceToken(IPermissionController::getInterfaceDescriptor());
99 data.writeString16(package);
100 data.writeInt32(flags);
101 remote()->transact(GET_PACKAGE_UID_TRANSACTION, data, &reply);
102 // fail on exception
103 if (reply.readExceptionCode() != 0) return false;
104 return reply.readInt32();
105 }
106 };
107
108 IMPLEMENT_META_INTERFACE(PermissionController, "android.os.IPermissionController");
109
110 // ----------------------------------------------------------------------
111
onTransact(uint32_t code,const Parcel & data,Parcel * reply,uint32_t flags)112 status_t BnPermissionController::onTransact(
113 uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags)
114 {
115 switch(code) {
116 case CHECK_PERMISSION_TRANSACTION: {
117 CHECK_INTERFACE(IPermissionController, data, reply);
118 String16 permission = data.readString16();
119 int32_t pid = data.readInt32();
120 int32_t uid = data.readInt32();
121 bool res = checkPermission(permission, pid, uid);
122 reply->writeNoException();
123 reply->writeInt32(res ? 1 : 0);
124 return NO_ERROR;
125 } break;
126
127 case NOTE_OP_TRANSACTION: {
128 CHECK_INTERFACE(IPermissionController, data, reply);
129 String16 op = data.readString16();
130 int32_t uid = data.readInt32();
131 String16 packageName = data.readString16();
132 int32_t res = noteOp(op, uid, packageName);
133 reply->writeNoException();
134 reply->writeInt32(res);
135 return NO_ERROR;
136 } break;
137
138 case GET_PACKAGES_FOR_UID_TRANSACTION: {
139 CHECK_INTERFACE(IPermissionController, data, reply);
140 int32_t uid = data.readInt32();
141 Vector<String16> packages;
142 getPackagesForUid(uid, packages);
143 reply->writeNoException();
144 size_t size = packages.size();
145 reply->writeInt32(size);
146 for (size_t i = 0; i < size; i++) {
147 reply->writeString16(packages[i]);
148 }
149 return NO_ERROR;
150 } break;
151
152 case IS_RUNTIME_PERMISSION_TRANSACTION: {
153 CHECK_INTERFACE(IPermissionController, data, reply);
154 String16 permission = data.readString16();
155 const bool res = isRuntimePermission(permission);
156 reply->writeNoException();
157 reply->writeInt32(res ? 1 : 0);
158 return NO_ERROR;
159 } break;
160
161 case GET_PACKAGE_UID_TRANSACTION: {
162 CHECK_INTERFACE(IPermissionController, data, reply);
163 String16 package = data.readString16();
164 int flags = data.readInt32();
165 const int uid = getPackageUid(package, flags);
166 reply->writeNoException();
167 reply->writeInt32(uid);
168 return NO_ERROR;
169 } break;
170
171 default:
172 return BBinder::onTransact(code, data, reply, flags);
173 }
174 }
175
176 }; // namespace android
177