You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
99 lines
3.3 KiB
99 lines
3.3 KiB
/*
|
|
* Copyright (C) 2014 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#include <set>
|
|
|
|
#define LOG_TAG "Netd"
|
|
|
|
#include "VirtualNetwork.h"
|
|
|
|
#include "RouteController.h"
|
|
|
|
#include "log/log.h"
|
|
|
|
namespace android {
|
|
namespace net {
|
|
|
|
VirtualNetwork::VirtualNetwork(unsigned netId, bool secure) : Network(netId, secure) {}
|
|
|
|
VirtualNetwork::~VirtualNetwork() {}
|
|
|
|
int VirtualNetwork::addUsers(const UidRanges& uidRanges, uint32_t subPriority) {
|
|
if (!isValidSubPriority(subPriority) || !canAddUidRanges(uidRanges, subPriority)) {
|
|
return -EINVAL;
|
|
}
|
|
|
|
for (const std::string& interface : mInterfaces) {
|
|
int ret = RouteController::addUsersToVirtualNetwork(mNetId, interface.c_str(), mSecure,
|
|
{{subPriority, uidRanges}});
|
|
if (ret) {
|
|
ALOGE("failed to add users on interface %s of netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
}
|
|
addToUidRangeMap(uidRanges, subPriority);
|
|
return 0;
|
|
}
|
|
|
|
int VirtualNetwork::removeUsers(const UidRanges& uidRanges, uint32_t subPriority) {
|
|
if (!isValidSubPriority(subPriority)) return -EINVAL;
|
|
|
|
for (const std::string& interface : mInterfaces) {
|
|
int ret = RouteController::removeUsersFromVirtualNetwork(mNetId, interface.c_str(), mSecure,
|
|
{{subPriority, uidRanges}});
|
|
if (ret) {
|
|
ALOGE("failed to remove users on interface %s of netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
}
|
|
removeFromUidRangeMap(uidRanges, subPriority);
|
|
return 0;
|
|
}
|
|
|
|
int VirtualNetwork::addInterface(const std::string& interface) {
|
|
if (hasInterface(interface)) {
|
|
return 0;
|
|
}
|
|
if (int ret = RouteController::addInterfaceToVirtualNetwork(mNetId, interface.c_str(), mSecure,
|
|
mUidRangeMap)) {
|
|
ALOGE("failed to add interface %s to VPN netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
mInterfaces.insert(interface);
|
|
return 0;
|
|
}
|
|
|
|
int VirtualNetwork::removeInterface(const std::string& interface) {
|
|
if (!hasInterface(interface)) {
|
|
return 0;
|
|
}
|
|
if (int ret = RouteController::removeInterfaceFromVirtualNetwork(mNetId, interface.c_str(),
|
|
mSecure, mUidRangeMap)) {
|
|
ALOGE("failed to remove interface %s from VPN netId %u", interface.c_str(), mNetId);
|
|
return ret;
|
|
}
|
|
mInterfaces.erase(interface);
|
|
return 0;
|
|
}
|
|
|
|
bool VirtualNetwork::isValidSubPriority(uint32_t priority) {
|
|
// Only supports default subsidiary permissions.
|
|
return priority == UidRanges::DEFAULT_SUB_PRIORITY;
|
|
}
|
|
|
|
} // namespace net
|
|
} // namespace android
|