blob: 9542d5066333151e0135dd1acf440e794ff5ec79 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
/*
* Copyright (C) 2009 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#ifndef BINDER_PERMISSION_H
#define BINDER_PERMISSION_H
#include <stdint.h>
#include <unistd.h>
#include <utils/SortedVector.h>
#include <utils/String16.h>
#include <utils/threads.h>
namespace android {
// ---------------------------------------------------------------------------
/*
* Permission caches the result of the permission check for the given
* permission name and the provided uid/pid. It also handles a few
* known cases efficiently (caller is in the same process or is root).
* The package manager does something similar but lives in dalvik world
* and is therefore extremely slow to access.
*/
class Permission
{
public:
Permission(char const* name);
Permission(const String16& name);
Permission(const Permission& rhs);
virtual ~Permission();
bool operator < (const Permission& rhs) const;
// checks the current binder call's caller has access to this permission
bool checkCalling() const;
// checks the specified pid/uid has access to this permission
bool check(pid_t pid, uid_t uid) const;
protected:
virtual bool doCheckPermission(pid_t pid, uid_t uid) const;
private:
Permission& operator = (const Permission& rhs) const;
const String16 mPermissionName;
mutable SortedVector<uid_t> mGranted;
const pid_t mPid;
mutable Mutex mLock;
};
// ---------------------------------------------------------------------------
}; // namespace android
#endif /* BINDER_PERMISSION_H */
|
