1b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver/*
2b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * Copyright (C) 2014 The Android Open Source Project
3b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver *
4b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * Licensed under the Apache License, Version 2.0 (the "License");
5b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * you may not use this file except in compliance with the License.
6b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * You may obtain a copy of the License at
7b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver *
8b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver *      http://www.apache.org/licenses/LICENSE-2.0
9b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver *
10b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * Unless required by applicable law or agreed to in writing, software
11b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * distributed under the License is distributed on an "AS IS" BASIS,
12b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * See the License for the specific language governing permissions and
14b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver * limitations under the License.
15b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver */
16b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
17b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverpackage com.android.server.firewall;
18b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
19b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport android.app.AppGlobals;
20b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport android.content.ComponentName;
21b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport android.content.Intent;
22b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport android.content.pm.IPackageManager;
23cd65448ccd13c4c2d0fe9e9623fec3a898ab9372Jeff Sharkeyimport android.content.pm.PackageManager;
24b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport android.os.RemoteException;
25b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport android.os.UserHandle;
26b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
27b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport org.xmlpull.v1.XmlPullParser;
28b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport org.xmlpull.v1.XmlPullParserException;
29b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
30b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverimport java.io.IOException;
31b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
32b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruverpublic class SenderPackageFilter implements Filter {
33b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    private static final String ATTR_NAME = "name";
34b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
35b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    public final String mPackageName;
36b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
37b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    public SenderPackageFilter(String packageName) {
38b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        mPackageName = packageName;
39b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    }
40b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
41b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    @Override
42b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    public boolean matches(IntentFirewall ifw, ComponentName resolvedComponent, Intent intent,
43b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            int callerUid, int callerPid, String resolvedType, int receivingUid) {
44b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        IPackageManager pm = AppGlobals.getPackageManager();
45b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
46b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        int packageUid = -1;
47b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        try {
487c69636c9a406265e1da368f3edfd8fb9651132cXiaohui Chen            // USER_SYSTEM here is not important. Only app id is used and getPackageUid() will
497c69636c9a406265e1da368f3edfd8fb9651132cXiaohui Chen            // return a uid whether the app is installed for a user or not.
500d1fd8d09163566d2c7eb72037f63b6404ada642Amith Yamasani            packageUid = pm.getPackageUid(mPackageName, PackageManager.MATCH_ANY_USER,
51cd65448ccd13c4c2d0fe9e9623fec3a898ab9372Jeff Sharkey                    UserHandle.USER_SYSTEM);
52b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        } catch (RemoteException ex) {
53b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            // handled below
54b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        }
55b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
56b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        if (packageUid == -1)  {
57b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            return false;
58b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        }
59b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
60b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        return UserHandle.isSameApp(packageUid, callerUid);
61b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    }
62b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
63b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    public static final FilterFactory FACTORY = new FilterFactory("sender-package") {
64b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        @Override
65b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        public Filter newFilter(XmlPullParser parser)
66b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver                throws IOException, XmlPullParserException {
67b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            String packageName = parser.getAttributeValue(null, ATTR_NAME);
68b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
69b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            if (packageName == null) {
70b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver                throw new XmlPullParserException(
71b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver                    "A package name must be specified.", parser, null);
72b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            }
73b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver
74b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver            return new SenderPackageFilter(packageName);
75b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver        }
76b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver    };
77b2340f3fcc2cfded97e0372a336bcf6f9211e0c1Ben Gruver}
78