esed: OemLock HAL implementation.
This change adds basic OemLock behavior
using libese-app-boot as well as a client
integration test (which should later move into
VTS-style testing).
It also moves OemLock and Weaver over to
a ScopedEseConnection which will open and close
the ese based on use. At present, it will log
on error and let later errors handle failures.
In the future, it can aid in helping with power
down delay requests and the HAL endpoints can
handle init() failures explicitly.
Test: starts eѕed and run the integration tests. Also confirm failure of
device lock flipping when production=true and boot_priv is high.
Bug: 35628284
Change-Id: I67442ec04ded2dc8f1ed1f37fe6b89af1e7e98e9
diff --git a/esed/OemLock.h b/esed/OemLock.h
new file mode 100644
index 0000000..3d8fc9d
--- /dev/null
+++ b/esed/OemLock.h
@@ -0,0 +1,58 @@
+/*
+ * Copyright (C) 2017 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef ANDROID_ESED_OEMLOCK_H
+#define ANDROID_ESED_OEMLOCK_H
+
+#include <android/hardware/oemlock/1.0/IOemLock.h>
+#include <hidl/MQDescriptor.h>
+#include <hidl/Status.h>
+
+#include <esecpp/EseInterface.h>
+
+namespace android {
+namespace esed {
+
+using ::android::EseInterface;
+using ::android::hardware::oemlock::V1_0::IOemLock;
+using ::android::hardware::oemlock::V1_0::OemLockSecureStatus;
+using ::android::hardware::oemlock::V1_0::OemLockStatus;
+using ::android::hardware::hidl_vec;
+using ::android::hardware::Return;
+
+struct OemLock : public IOemLock {
+ OemLock(EseInterface& ese) : mEse(ese) {}
+
+ // Methods from ::android::hardware::oemlock::V1_0::IOemLock follow.
+ Return<void> getName(getName_cb _hidl_cb) override;
+
+ Return<OemLockSecureStatus> setOemUnlockAllowedByCarrier(
+ bool allowed, const hidl_vec<uint8_t>& signature) override;
+
+ Return<void> isOemUnlockAllowedByCarrier(isOemUnlockAllowedByCarrier_cb _hidl_cb) override;
+
+ Return<OemLockStatus> setOemUnlockAllowedByDevice(bool allowed) override;
+
+ Return<void> isOemUnlockAllowedByDevice(isOemUnlockAllowedByDevice_cb _hidl_cb) override;
+
+private:
+ EseInterface& mEse;
+};
+
+} // namespace esed
+} // namespace android
+
+#endif // ANDROID_ESED_OEMLOCK_H