2 // Copyright (c) 2012 Samsung Electronics Co., Ltd.
4 // Licensed under the Apache License, Version 2.0 (the License);
5 // you may not use this file except in compliance with the License.
6 // You may obtain a copy of the License at
8 // http://www.apache.org/licenses/LICENSE-2.0
10 // Unless required by applicable law or agreed to in writing, software
11 // distributed under the License is distributed on an "AS IS" BASIS,
12 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 // See the License for the specific language governing permissions and
14 // limitations under the License.
18 * @file FSec_PrivilegeManager.cpp
19 * @brief This is the implementation for the _PrivilegeManager class.
24 #include <unique_ptr.h>
25 #include <FAppPkg_PackageInfoImpl.h>
26 #include <FAppPkg_PackageManagerImpl.h>
27 #include <FBaseString.h>
28 #include <FBaseSysLog.h>
29 #include <FIo_IpcClient.h>
30 #include "FSec_AccessControlTypes.h"
31 #include "FSec_PrivilegeManager.h"
32 #include "FSec_PrivilegeManagerMessage.h"
33 #include "FSec_PrivilegeCache.h"
34 #include "FSec_PrivilegeInfo.h"
36 using namespace Tizen::App;
37 using namespace Tizen::App::Package;
38 using namespace Tizen::Base;
39 using namespace Tizen::Base::Collection;
40 using namespace Tizen::Io;
42 namespace Tizen { namespace Security
45 _PrivilegeManager* _PrivilegeManager::__pPrivilegeManagerInstance = null;
47 _PrivilegeManager::_PrivilegeManager(void)
48 : __pPrivilegeCache(null)
53 _PrivilegeManager::~_PrivilegeManager(void)
55 delete __pPrivilegeCache;
60 _PrivilegeManager::Construct(void)
64 _PackageManagerImpl* pPackageManagerImpl = null;
66 pPackageManagerImpl = _PackageManagerImpl::GetInstance();
67 SysTryReturnResult(NID_SEC, pPackageManagerImpl != null, E_SYSTEM, "An unexpected system error occurred.");
69 //pPackageManagerImpl->RemoveEventListener(this);
70 r = pPackageManagerImpl->AddEventListener(this);
71 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
73 __pPrivilegeCache = new (std::nothrow) _PrivilegeCache();
74 SysTryReturnResult(NID_SEC, __pPrivilegeCache != null, E_OUT_OF_MEMORY, "Memory allocation is failed.");
76 r = __pPrivilegeCache->Construct();
77 SysTryCatch(NID_SEC, r == E_SUCCESS, r = E_SYSTEM, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
83 delete __pPrivilegeCache;
88 _PrivilegeManager::InitInstance(void)
91 static _PrivilegeManager instance;
95 r = instance.Construct();
96 SysTryReturnVoidResult(NID_SEC, r == E_SUCCESS, r, "[%s] Propagating.", GetErrorMessage(r));
98 __pPrivilegeManagerInstance = &instance;
104 _PrivilegeManager::GetInstance(void)
106 result r = E_SUCCESS;
107 static pthread_once_t onceBlock = PTHREAD_ONCE_INIT;
111 if (__pPrivilegeManagerInstance == null)
113 pthread_once(&onceBlock, InitInstance);
118 onceBlock = PTHREAD_ONCE_INIT;
122 return __pPrivilegeManagerInstance;
127 _PrivilegeManager::GetPrivilegeListN(const AppId& appId)
129 result r = E_SUCCESS;
130 _PrivilegeInfo privilegeInfo;
131 byte* pTargetBitwisePrivilege = null;
132 IList* pReturnPrivilegeList = null;
133 String encryptedPrivileges;
135 ArrayList* pPrivilegeList = null;
139 r = RetrieveCipherPrivilegeN(appId, encryptedPrivileges, checksum, pPrivilegeList);
140 if (r == E_DATA_NOT_FOUND)
142 SysLogException(NID_SEC, E_DATA_NOT_FOUND, "[E_DATA_NOT_FOUND] The privilege information does not exist.");
145 SysTryReturn(NID_SEC, r == E_SUCCESS, null, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
147 r = privilegeInfo.Construct(appId, encryptedPrivileges, checksum, pPrivilegeList);
148 SysTryCatch(NID_SEC, r == E_SUCCESS, r = E_SYSTEM, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
150 r = privilegeInfo.GetBitwisePrivilegeN(pTargetBitwisePrivilege);
151 SysTryCatch(NID_SEC, r == E_SUCCESS, r = E_SYSTEM, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
153 pReturnPrivilegeList = UnpackPrivilegeN(pTargetBitwisePrivilege);
154 SysTryCatch(NID_SEC, pReturnPrivilegeList != null, r = E_SYSTEM, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
160 if (pPrivilegeList != null)
162 pPrivilegeList->RemoveAll(true);
163 delete pPrivilegeList;
166 if (pTargetBitwisePrivilege)
168 free(pTargetBitwisePrivilege);
169 pTargetBitwisePrivilege = null;
172 return pReturnPrivilegeList;
176 _PrivilegeManager::RetrieveCipherPrivilegeN(const AppId& appId, Tizen::Base::String& encryptedPrivileges, Tizen::Base::String& checksum, ArrayList*& pPrivilegeList)
178 result r = E_SUCCESS;
179 ArrayList tempPrivilegeList;
181 encryptedPrivileges.Clear();
184 r = tempPrivilegeList.Construct();
185 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
187 _PackageInfoImpl infoImpl;
188 r = infoImpl.Construct(appId);
189 if (r == E_APP_NOT_INSTALLED)
191 SysLogException(NID_SEC, E_DATA_NOT_FOUND, "[E_DATA_NOT_FOUND] The privilege information does not exist.");
192 return E_DATA_NOT_FOUND;
194 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
196 r = infoImpl.GetPrivileges(encryptedPrivileges, checksum, tempPrivilegeList);
197 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
198 SysTryReturnResult(NID_SEC, encryptedPrivileges.IsEmpty() != true, E_DATA_NOT_FOUND, "The privilege information does not exist.");
199 SysTryReturnResult(NID_SEC, checksum.IsEmpty() != true, E_SYSTEM, "An unexpected system error occurred.");
201 pPrivilegeList = new ArrayList;
202 r = pPrivilegeList->Construct();
204 IEnumerator* pEnum = tempPrivilegeList.GetEnumeratorN();
205 while (pEnum->MoveNext() == E_SUCCESS)
207 String* tempString = static_cast< String* >(pEnum->GetCurrent());
208 pPrivilegeList->Add(new String(*tempString));
211 tempPrivilegeList.RemoveAll(true);
216 _PrivilegeManager::RetrieveCipherPrivilegeExN(const AppId& appId, Tizen::Base::String& encryptedPrivileges, Tizen::Base::String& checksum, ArrayList*& pPrivilegeList)
218 result r = E_SUCCESS;
220 encryptedPrivileges.Clear();
223 String tempEncryptedPrivileges;
225 ArrayList tempPrivilegeList;
227 r = tempPrivilegeList.Construct();
228 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
230 _PackageInfoImpl infoImpl;
231 r = infoImpl.Construct(appId);
232 if (r == E_APP_NOT_INSTALLED)
234 SysLogException(NID_SEC, E_DATA_NOT_FOUND, "[E_DATA_NOT_FOUND] The privilege information does not exist.");
235 return E_DATA_NOT_FOUND;
237 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
239 r = infoImpl.GetPrivileges(tempEncryptedPrivileges, tempChecksum, tempPrivilegeList);
240 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
241 SysTryReturnResult(NID_SEC, tempEncryptedPrivileges.IsEmpty() != true, E_DATA_NOT_FOUND, "The privilege information does not exist.");
242 SysTryReturnResult(NID_SEC, tempChecksum.IsEmpty() != true, E_SYSTEM, "An unexpected system error occurred.");
244 _PrivilegeInfo privilegeInfo;
246 r = privilegeInfo.Construct(appId, tempEncryptedPrivileges, tempChecksum, &tempPrivilegeList);
247 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
249 r = privilegeInfo.GetEncryptedBitwise(encryptedPrivileges);
250 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
252 r = privilegeInfo.GetChecksum(checksum);
253 SysTryReturnResult(NID_SEC, r == E_SUCCESS, E_SYSTEM, "An unexpected system error occurred.");
255 pPrivilegeList = new ArrayList;
256 r = pPrivilegeList->Construct();
258 IEnumerator* pEnum = tempPrivilegeList.GetEnumeratorN();
259 while (pEnum->MoveNext() == E_SUCCESS)
261 String* tempString = static_cast< String* >(pEnum->GetCurrent());
262 pPrivilegeList->Add(new String(*tempString));
265 tempPrivilegeList.RemoveAll(true);
270 _PrivilegeManager::RetrievePrivilegeInfoN(const AppId& appId) const
272 result r = E_SUCCESS;
274 String encryptedPrivileges;
276 std::unique_ptr<_PrivilegeInfo> pPrivilegeInfo(null);
277 _PackageInfoImpl infoImpl;
278 ArrayList* pPrivilegeList = null;
282 pPrivilegeInfo.reset(__pPrivilegeCache->GetPrivilegeInfoN(appId));
289 else if (r == E_DATA_NOT_FOUND)
291 r = RetrieveCipherPrivilegeN(appId, encryptedPrivileges, checksum, pPrivilegeList);
292 if (r == E_DATA_NOT_FOUND)
294 SysLogException(NID_SEC, E_DATA_NOT_FOUND, "[E_DATA_NOT_FOUND] The privilege information does not exist.");
297 SysTryReturn(NID_SEC, r == E_SUCCESS, null, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
299 pPrivilegeInfo.reset(new (std::nothrow) _PrivilegeInfo());
300 SysTryReturn(NID_SEC, pPrivilegeInfo != null, null, E_OUT_OF_MEMORY, "[E_OUT_OF_MEMORY] The memory is insufficient.");
302 r = pPrivilegeInfo->Construct(appId, encryptedPrivileges, checksum, pPrivilegeList);
303 SysTryReturn(NID_SEC, r == E_SUCCESS, null, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
305 r = __pPrivilegeCache->AddPrivilegeInfo(*(pPrivilegeInfo.get()));
306 SysTryReturn(NID_SEC, r == E_SUCCESS, null, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
308 if (pPrivilegeList != null)
310 pPrivilegeList->RemoveAll(true);
311 delete pPrivilegeList;
317 SysLogException(NID_SEC, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
321 return pPrivilegeInfo.release();
326 _PrivilegeManager::UnpackPrivilegeN(const byte* pBitwisePrivilege)
328 result r = E_SUCCESS;
331 int bytePosition = 0;
333 int privilegeBit = 0;
334 int privilegeEnum = 0;
335 std::unique_ptr<ArrayList> pPrivilegeList(null);
339 SysTryReturn(NID_SEC, pBitwisePrivilege != null, null, E_INVALID_ARG, "One of the argument is invalid.");
341 pPrivilegeList.reset(new (std::nothrow) ArrayList());
342 SysTryReturn(NID_SEC, pPrivilegeList != null, null, E_OUT_OF_MEMORY, "[E_OUT_OF_MEMORY] The memory is insufficient.");
344 r = pPrivilegeList->Construct();
345 SysTryReturn(NID_SEC, r == E_SUCCESS, null, E_SYSTEM, "[E_SYSTEM] An unexpected system error occurred.");
347 for (bytePosition = 0; bytePosition < MAX_BITWISE_PRIV_SIZE; bytePosition++)
351 if (!(pBitwisePrivilege[bytePosition] & 0xFF))
353 // Pass the checking of empty byte filed.
357 for (bitPosition = 0; bitPosition < _BITS_IN_BYTE; bitPosition++)
359 privilegeBit = (int) (pBitwisePrivilege[bytePosition] & maskFlag);
362 // Shift the maskFlag by 1 bit when face the empty bit.
363 maskFlag = maskFlag << 1;
367 privilegeEnum = (bytePosition * _BITS_IN_BYTE) + bitPosition;
369 for (index = 0; index < _MAX_PRIVILEGE_ENUM; index++)
371 if (privilegeEnum == privilegeListTable[index].privilege)
373 String* privilegeString = new (std::nothrow) String(L"http://tizen.org/privilege/");
374 privilegeString->Append(privilegeListTable[index].privilegeString);
375 SysTryCatch(NID_SEC, privilegeString != null, r = E_OUT_OF_MEMORY, E_OUT_OF_MEMORY,
376 "[E_OUT_OF_MEMORY]The memory is insufficient.");
378 pPrivilegeList->Add(*privilegeString);
383 // Shift the maskFlag by 1 bit to check the next byte filed.
384 maskFlag = maskFlag << 1;
388 return pPrivilegeList.release();
392 pPrivilegeList->RemoveAll(true);
397 _PrivilegeManager::OnPackageInstallationCompleted(const PackageId& packageId, PackageInstallationResult installationResult)
399 __pPrivilegeCache->RemovePrivilegeInfo(packageId);
400 SysLog(NID_SEC, "%ls is removed.", packageId.GetPointer());