| /* |
| * Copyright 2017 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| #include "permission_helpers.h" |
| |
| #include <base/logging.h> |
| #include <base/strings/stringprintf.h> |
| #include <binder/IPCThreadState.h> |
| #include <binder/IServiceManager.h> |
| #include <pwd.h> |
| #include <sys/types.h> |
| #include "IUserManager.h" |
| |
| using ::android::binder::Status; |
| |
| namespace android { |
| namespace bluetooth { |
| |
| uid_t foregroundUserId; |
| uid_t systemUiUid; |
| static uid_t SYSTEM_UID = 1000; |
| constexpr int PER_USER_RANGE = 100000; |
| |
| Status checkPermission(const char* permission) { |
| int32_t pid; |
| int32_t uid; |
| |
| if (android::checkCallingPermission(String16(permission), &pid, &uid)) { |
| return Status::ok(); |
| } |
| |
| auto err = ::base::StringPrintf("UID %d / PID %d lacks permission %s", uid, |
| pid, permission); |
| return Status::fromExceptionCode(Status::EX_SECURITY, String8(err.c_str())); |
| } |
| |
| bool isCallerActiveUser() { |
| IPCThreadState* ipcState = IPCThreadState::selfOrNull(); |
| if (!ipcState) return true; // It's a local call |
| |
| uid_t callingUid = ipcState->getCallingUid(); |
| uid_t callingUser = callingUid / PER_USER_RANGE; |
| if (callingUid == getuid()) return true; // It's a local call |
| |
| return (foregroundUserId == callingUser) || (systemUiUid == callingUid) || |
| (SYSTEM_UID == callingUid); |
| } |
| |
| bool isCallerActiveUserOrManagedProfile() { |
| IPCThreadState* ipcState = IPCThreadState::selfOrNull(); |
| if (!ipcState) return true; // It's a local call |
| |
| uid_t callingUid = ipcState->getCallingUid(); |
| uid_t callingUser = callingUid / PER_USER_RANGE; |
| if (callingUid == getuid()) return true; // It's a local call |
| |
| if ((foregroundUserId == callingUser) || (systemUiUid == callingUid) || |
| (SYSTEM_UID == callingUid)) |
| return true; |
| |
| uid_t parentUser = callingUser; |
| |
| sp<IServiceManager> sm = defaultServiceManager(); |
| sp<IBinder> binder = sm->getService(String16("user")); |
| sp<IUserManager> um = interface_cast<IUserManager>(binder); |
| if (um != NULL) { |
| // Must use Bluetooth process identity when making call to get parent user |
| int64_t ident = ipcState->clearCallingIdentity(); |
| parentUser = um->getProfileParentId(callingUser); |
| ipcState->restoreCallingIdentity(ident); |
| } |
| |
| return foregroundUserId == parentUser; |
| } |
| |
| } // namespace bluetooth |
| } // namespace android |