1 /*
2 * Copyright (c) 2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "netmanager_ext_test_security.h"
17
18 #include "nativetoken_kit.h"
19 #include "token_setproc.h"
20
21 namespace OHOS {
22 namespace NetManagerStandard {
23 using namespace Security::AccessToken;
24 using Security::AccessToken::AccessTokenID;
25 namespace {
26 HapInfoParams netManagerExtParms = {
27 .userID = 1,
28 .bundleName = "netmanager_ext_test",
29 .instIndex = 0,
30 .appIDDesc = "test",
31 .isSystemApp = true,
32 };
33
34 PermissionDef connectivityInternalPermDef = {
35 .permissionName = "ohos.permission.CONNECTIVITY_INTERNAL",
36 .bundleName = "netmanager_ext_test",
37 .grantMode = 1,
38 .availableLevel = OHOS::Security::AccessToken::ATokenAplEnum::APL_SYSTEM_BASIC,
39 .label = "label",
40 .labelId = 1,
41 .description = "Test ethernet connectivity internet",
42 .descriptionId = 1,
43 };
44
45 PermissionStateFull connectivityInternalState = {
46 .permissionName = "ohos.permission.CONNECTIVITY_INTERNAL",
47 .isGeneral = true,
48 .resDeviceID = { "local" },
49 .grantStatus = { PermissionState::PERMISSION_GRANTED },
50 .grantFlags = { 2 },
51 };
52
53 PermissionDef getNetworkInfoPermDef = {
54 .permissionName = "ohos.permission.GET_NETWORK_INFO",
55 .bundleName = "netmanager_ext_test",
56 .grantMode = 1,
57 .availableLevel = OHOS::Security::AccessToken::ATokenAplEnum::APL_SYSTEM_BASIC,
58 .label = "label",
59 .labelId = 1,
60 .description = "Test ethernet maneger network info",
61 .descriptionId = 1,
62 };
63
64 PermissionStateFull getNetworkInfoState = {
65 .permissionName = "ohos.permission.GET_NETWORK_INFO",
66 .isGeneral = true,
67 .resDeviceID = { "local" },
68 .grantStatus = { PermissionState::PERMISSION_GRANTED },
69 .grantFlags = { 2 },
70 };
71
72 PermissionDef manageVpnPermDef = {
73 .permissionName = "ohos.permission.MANAGE_VPN",
74 .bundleName = "netmanager_ext_test",
75 .grantMode = 1,
76 .availableLevel = APL_SYSTEM_BASIC,
77 .label = "label",
78 .labelId = 1,
79 .description = "Test vpn maneger network info",
80 .descriptionId = 1,
81 };
82
83 PermissionStateFull manageVpnState = {
84 .permissionName = "ohos.permission.MANAGE_VPN",
85 .isGeneral = true,
86 .resDeviceID = { "local" },
87 .grantStatus = { PermissionState::PERMISSION_GRANTED },
88 .grantFlags = { 2 },
89 };
90
91 PermissionDef getNetFirewallPermDef = {
92 .permissionName = "ohos.permission.MANAGE_NET_STRATEGY",
93 .bundleName = "netmanager_ext_test",
94 .grantMode = 1,
95 .availableLevel = OHOS::Security::AccessToken::ATokenAplEnum::APL_SYSTEM_BASIC,
96 .label = "label",
97 .labelId = 1,
98 .description = "Test netfirewall maneger info",
99 .descriptionId = 1,
100 };
101
102 PermissionStateFull getNetFirewallState = {
103 .permissionName = "ohos.permission.MANAGE_NET_STRATEGY",
104 .isGeneral = true,
105 .resDeviceID = { "local" },
106 .grantStatus = { PermissionState::PERMISSION_GRANTED },
107 .grantFlags = { 2 },
108 };
109
110 HapPolicyParams netManagerExtPolicy = {
111 .apl = APL_SYSTEM_BASIC,
112 .domain = "test.domain",
113 .permList = { getNetworkInfoPermDef, connectivityInternalPermDef, manageVpnPermDef, getNetFirewallPermDef },
114 .permStateList = { getNetworkInfoState, connectivityInternalState, manageVpnState, getNetFirewallState },
115 };
116
117 PermissionDef testNoPermissionDef = {
118 .permissionName = "",
119 .bundleName = "netmanager_ext_test",
120 .grantMode = 1,
121 .availableLevel = APL_SYSTEM_BASIC,
122 .label = "label",
123 .labelId = 1,
124 .description = "Test no permission",
125 .descriptionId = 1,
126 };
127
128 PermissionStateFull testNoPermissionState = {
129 .permissionName = "",
130 .isGeneral = true,
131 .resDeviceID = { "local" },
132 .grantStatus = { PermissionState::PERMISSION_GRANTED },
133 .grantFlags = { 2 },
134 };
135
136 HapPolicyParams testNoPermission = {
137 .apl = APL_SYSTEM_BASIC,
138 .domain = "test.domain",
139 .permList = { testNoPermissionDef },
140 .permStateList = { testNoPermissionState },
141 };
142 } // namespace
143
NetManagerExtAccessToken()144 NetManagerExtAccessToken::NetManagerExtAccessToken() : currentID_(GetSelfTokenID())
145 {
146 AccessTokenIDEx tokenIdEx = AccessTokenKit::AllocHapToken(netManagerExtParms, netManagerExtPolicy);
147 accessID_ = tokenIdEx.tokenIdExStruct.tokenID;
148 SetSelfTokenID(tokenIdEx.tokenIDEx);
149 }
150
~NetManagerExtAccessToken()151 NetManagerExtAccessToken::~NetManagerExtAccessToken()
152 {
153 AccessTokenKit::DeleteToken(accessID_);
154 SetSelfTokenID(currentID_);
155 }
156
NetManagerExtNotSystemAccessToken()157 NetManagerExtNotSystemAccessToken::NetManagerExtNotSystemAccessToken() : currentID_(GetSelfTokenID())
158 {
159 AccessTokenIDEx tokenIdEx = AccessTokenKit::AllocHapToken(netManagerExtParms, netManagerExtPolicy);
160 accessID_ = tokenIdEx.tokenIdExStruct.tokenID;
161 SetSelfTokenID(accessID_);
162 }
163
~NetManagerExtNotSystemAccessToken()164 NetManagerExtNotSystemAccessToken::~NetManagerExtNotSystemAccessToken()
165 {
166 AccessTokenKit::DeleteToken(accessID_);
167 SetSelfTokenID(currentID_);
168 }
169
NoPermissionAccessToken()170 NoPermissionAccessToken::NoPermissionAccessToken() : currentID_(GetSelfTokenID())
171 {
172 AccessTokenIDEx tokenIdEx = AccessTokenKit::AllocHapToken(netManagerExtParms, testNoPermission);
173 accessID_ = tokenIdEx.tokenIdExStruct.tokenID;
174 SetSelfTokenID(tokenIdEx.tokenIDEx);
175 }
176
~NoPermissionAccessToken()177 NoPermissionAccessToken::~NoPermissionAccessToken()
178 {
179 AccessTokenKit::DeleteToken(accessID_);
180 SetSelfTokenID(currentID_);
181 }
182 } // namespace NetManagerStandard
183 } // namespace OHOS
184