/*
* Copyright (C) 2014 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#define LOG_TAG "Netd"
#include "PhysicalNetwork.h"
#include "RouteController.h"
#include "SockDiag.h"
#include "log/log.h"
namespace android {
namespace net {
namespace {
WARN_UNUSED_RESULT int addToDefault(unsigned netId, const std::string& interface,
Permission permission, PhysicalNetwork::Delegate* delegate) {
if (int ret = RouteController::addInterfaceToDefaultNetwork(interface.c_str(), permission)) {
ALOGE("failed to add interface %s to default netId %u", interface.c_str(), netId);
return ret;
}
if (int ret = delegate->addFallthrough(interface, permission)) {
return ret;
}
return 0;
}
WARN_UNUSED_RESULT int removeFromDefault(unsigned netId, const std::string& interface,
Permission permission,
PhysicalNetwork::Delegate* delegate) {
if (int ret = RouteController::removeInterfaceFromDefaultNetwork(interface.c_str(),
permission)) {
ALOGE("failed to remove interface %s from default netId %u", interface.c_str(), netId);
return ret;
}
if (int ret = delegate->removeFallthrough(interface, permission)) {
return ret;
}
return 0;
}
} // namespace
PhysicalNetwork::Delegate::~Delegate() {
}
PhysicalNetwork::PhysicalNetwork(unsigned netId, PhysicalNetwork::Delegate* delegate) :
Network(netId), mDelegate(delegate), mPermission(PERMISSION_NONE), mIsDefault(false) {
}
PhysicalNetwork::~PhysicalNetwork() {
}
Permission PhysicalNetwork::getPermission() const {
return mPermission;
}
int PhysicalNetwork::destroySocketsLackingPermission(Permission permission) {
if (permission == PERMISSION_NONE) return 0;
SockDiag sd;
if (!sd.open()) {
ALOGE("Error closing sockets for netId %d permission change", mNetId);
return -EBADFD;
}
if (int ret = sd.destroySocketsLackingPermission(mNetId, permission,
true /* excludeLoopback */)) {
ALOGE("Failed to close sockets changing netId %d to permission %d: %s",
mNetId, permission, strerror(-ret));
return ret;
}
return 0;
}
void PhysicalNetwork::invalidateRouteCache(const std::string& interface) {
for (const auto& dst : { "0.0.0.0/0", "::/0" }) {
// If any of these operations fail, there's no point in logging because RouteController will
// have already logged a message. There's also no point returning an error since there's
// nothing we can do.
(void) RouteController::addRoute(interface.c_str(), dst, "throw",
RouteController::INTERFACE);
(void) RouteController::removeRoute(interface.c_str(), dst, "throw",
RouteController::INTERFACE);
}
}
int PhysicalNetwork::setPermission(Permission permission) {
if (permission == mPermission) {
return 0;
}
if (mInterfaces.empty()) {
mPermission = permission;
return 0;
}
destroySocketsLackingPermission(permission);
for (const std::string& interface : mInterfaces) {
if (int ret = RouteController::modifyPhysicalNetworkPermission(mNetId, interface.c_str(),
mPermission, permission)) {
ALOGE("failed to change permission on interface %s of netId %u from %x to %x",
interface.c_str(), mNetId, mPermission, permission);
return ret;
}
invalidateRouteCache(interface);
}
if (mIsDefault) {
for (const std::string& interface : mInterfaces) {
if (int ret = addToDefault(mNetId, interface, permission, mDelegate)) {
return ret;
}
if (int ret = removeFromDefault(mNetId, interface, mPermission, mDelegate)) {
return ret;
}
}
}
// Destroy sockets again in case any were opened after we called destroySocketsLackingPermission
// above and before we changed the permissions. These sockets won't be able to send any RST
// packets because they are now no longer routed, but at least the apps will get errors.
destroySocketsLackingPermission(permission);
mPermission = permission;
return 0;
}
int PhysicalNetwork::addAsDefault() {
if (mIsDefault) {
return 0;
}
for (const std::string& interface : mInterfaces) {
if (int ret = addToDefault(mNetId, interface, mPermission, mDelegate)) {
return ret;
}
}
mIsDefault = true;
return 0;
}
int PhysicalNetwork::removeAsDefault() {
if (!mIsDefault) {
return 0;
}
for (const std::string& interface : mInterfaces) {
if (int ret = removeFromDefault(mNetId, interface, mPermission, mDelegate)) {
return ret;
}
}
mIsDefault = false;
return 0;
}
Network::Type PhysicalNetwork::getType() const {
return PHYSICAL;
}
int PhysicalNetwork::addInterface(const std::string& interface) {
if (hasInterface(interface)) {
return 0;
}
if (int ret = RouteController::addInterfaceToPhysicalNetwork(mNetId, interface.c_str(),
mPermission)) {
ALOGE("failed to add interface %s to netId %u", interface.c_str(), mNetId);
return ret;
}
if (mIsDefault) {
if (int ret = addToDefault(mNetId, interface, mPermission, mDelegate)) {
return ret;
}
}
mInterfaces.insert(interface);
return 0;
}
int PhysicalNetwork::removeInterface(const std::string& interface) {
if (!hasInterface(interface)) {
return 0;
}
if (mIsDefault) {
if (int ret = removeFromDefault(mNetId, interface, mPermission, mDelegate)) {
return ret;
}
}
// This step will flush the interface index from the cache in RouteController so it must be
// done last as further requests to the RouteController regarding this interface will fail
// to find the interface index in the cache in cases where the interface is already gone
// (e.g. bt-pan).
if (int ret = RouteController::removeInterfaceFromPhysicalNetwork(mNetId, interface.c_str(),
mPermission)) {
ALOGE("failed to remove interface %s from netId %u", interface.c_str(), mNetId);
return ret;
}
mInterfaces.erase(interface);
return 0;
}
} // namespace net
} // namespace android