102 lines
3.4 KiB
C++
102 lines
3.4 KiB
C++
/*
|
|
* Copyright (C) 2014 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#include <set>
|
|
|
|
#define LOG_TAG "Netd"
|
|
|
|
#include "VirtualNetwork.h"
|
|
|
|
#include "RouteController.h"
|
|
|
|
#include "log/log.h"
|
|
|
|
namespace android {
|
|
namespace net {
|
|
|
|
VirtualNetwork::VirtualNetwork(unsigned netId, bool secure, bool excludeLocalRoutes)
|
|
: Network(netId, secure), mExcludeLocalRoutes(excludeLocalRoutes) {}
|
|
|
|
VirtualNetwork::~VirtualNetwork() {}
|
|
|
|
int VirtualNetwork::addUsers(const UidRanges& uidRanges, int32_t subPriority) {
|
|
if (!isValidSubPriority(subPriority) || !canAddUidRanges(uidRanges)) {
|
|
return -EINVAL;
|
|
}
|
|
|
|
for (const std::string& interface : mInterfaces) {
|
|
int ret = RouteController::addUsersToVirtualNetwork(mNetId, interface.c_str(), mSecure,
|
|
{{subPriority, uidRanges}},
|
|
mExcludeLocalRoutes);
|
|
if (ret) {
|
|
ALOGE("failed to add users on interface %s of netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
}
|
|
addToUidRangeMap(uidRanges, subPriority);
|
|
return 0;
|
|
}
|
|
|
|
int VirtualNetwork::removeUsers(const UidRanges& uidRanges, int32_t subPriority) {
|
|
if (!isValidSubPriority(subPriority)) return -EINVAL;
|
|
|
|
for (const std::string& interface : mInterfaces) {
|
|
int ret = RouteController::removeUsersFromVirtualNetwork(mNetId, interface.c_str(), mSecure,
|
|
{{subPriority, uidRanges}},
|
|
mExcludeLocalRoutes);
|
|
if (ret) {
|
|
ALOGE("failed to remove users on interface %s of netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
}
|
|
removeFromUidRangeMap(uidRanges, subPriority);
|
|
return 0;
|
|
}
|
|
|
|
int VirtualNetwork::addInterface(const std::string& interface) {
|
|
if (hasInterface(interface)) {
|
|
return 0;
|
|
}
|
|
if (int ret = RouteController::addInterfaceToVirtualNetwork(
|
|
mNetId, interface.c_str(), mSecure, mUidRangeMap, mExcludeLocalRoutes)) {
|
|
ALOGE("failed to add interface %s to VPN netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
mInterfaces.insert(interface);
|
|
return 0;
|
|
}
|
|
|
|
int VirtualNetwork::removeInterface(const std::string& interface) {
|
|
if (!hasInterface(interface)) {
|
|
return 0;
|
|
}
|
|
if (int ret = RouteController::removeInterfaceFromVirtualNetwork(
|
|
mNetId, interface.c_str(), mSecure, mUidRangeMap, mExcludeLocalRoutes)) {
|
|
ALOGE("failed to remove interface %s from VPN netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
mInterfaces.erase(interface);
|
|
return 0;
|
|
}
|
|
|
|
bool VirtualNetwork::isValidSubPriority(int32_t priority) {
|
|
// Only supports default subsidiary permissions.
|
|
return priority == UidRanges::SUB_PRIORITY_HIGHEST;
|
|
}
|
|
|
|
} // namespace net
|
|
} // namespace android
|