xref: /aosp_15_r20/system/netd/server/UnreachableNetwork.cpp (revision 8542734a0dd1db395a4d42aae09c37f3c3c3e7a1)
1*8542734aSAndroid Build Coastguard Worker /*
2*8542734aSAndroid Build Coastguard Worker  * Copyright (C) 2021 The Android Open Source Project
3*8542734aSAndroid Build Coastguard Worker  *
4*8542734aSAndroid Build Coastguard Worker  * Licensed under the Apache License, Version 2.0 (the "License");
5*8542734aSAndroid Build Coastguard Worker  * you may not use this file except in compliance with the License.
6*8542734aSAndroid Build Coastguard Worker  * You may obtain a copy of the License at
7*8542734aSAndroid Build Coastguard Worker  *
8*8542734aSAndroid Build Coastguard Worker  *      http://www.apache.org/licenses/LICENSE-2.0
9*8542734aSAndroid Build Coastguard Worker  *
10*8542734aSAndroid Build Coastguard Worker  * Unless required by applicable law or agreed to in writing, software
11*8542734aSAndroid Build Coastguard Worker  * distributed under the License is distributed on an "AS IS" BASIS,
12*8542734aSAndroid Build Coastguard Worker  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*8542734aSAndroid Build Coastguard Worker  * See the License for the specific language governing permissions and
14*8542734aSAndroid Build Coastguard Worker  * limitations under the License.
15*8542734aSAndroid Build Coastguard Worker  */
16*8542734aSAndroid Build Coastguard Worker 
17*8542734aSAndroid Build Coastguard Worker #define LOG_TAG "Netd"
18*8542734aSAndroid Build Coastguard Worker 
19*8542734aSAndroid Build Coastguard Worker #include "UnreachableNetwork.h"
20*8542734aSAndroid Build Coastguard Worker 
21*8542734aSAndroid Build Coastguard Worker #include "RouteController.h"
22*8542734aSAndroid Build Coastguard Worker 
23*8542734aSAndroid Build Coastguard Worker namespace android {
24*8542734aSAndroid Build Coastguard Worker namespace net {
25*8542734aSAndroid Build Coastguard Worker 
26*8542734aSAndroid Build Coastguard Worker // The unreachable network is used to reject traffic. It is used for system purposes only.
UnreachableNetwork(unsigned netId)27*8542734aSAndroid Build Coastguard Worker UnreachableNetwork::UnreachableNetwork(unsigned netId) : Network(netId) {}
28*8542734aSAndroid Build Coastguard Worker 
addUsers(const UidRanges & uidRanges,int32_t subPriority)29*8542734aSAndroid Build Coastguard Worker int UnreachableNetwork::addUsers(const UidRanges& uidRanges, int32_t subPriority) {
30*8542734aSAndroid Build Coastguard Worker     if (!isValidSubPriority(subPriority) || !canAddUidRanges(uidRanges)) {
31*8542734aSAndroid Build Coastguard Worker         return -EINVAL;
32*8542734aSAndroid Build Coastguard Worker     }
33*8542734aSAndroid Build Coastguard Worker 
34*8542734aSAndroid Build Coastguard Worker     int ret = RouteController::addUsersToUnreachableNetwork(mNetId, {{subPriority, uidRanges}});
35*8542734aSAndroid Build Coastguard Worker     if (ret) {
36*8542734aSAndroid Build Coastguard Worker         ALOGE("failed to add users to unreachable network");
37*8542734aSAndroid Build Coastguard Worker         return ret;
38*8542734aSAndroid Build Coastguard Worker     }
39*8542734aSAndroid Build Coastguard Worker     addToUidRangeMap(uidRanges, subPriority);
40*8542734aSAndroid Build Coastguard Worker     return 0;
41*8542734aSAndroid Build Coastguard Worker }
42*8542734aSAndroid Build Coastguard Worker 
removeUsers(const UidRanges & uidRanges,int32_t subPriority)43*8542734aSAndroid Build Coastguard Worker int UnreachableNetwork::removeUsers(const UidRanges& uidRanges, int32_t subPriority) {
44*8542734aSAndroid Build Coastguard Worker     if (!isValidSubPriority(subPriority)) return -EINVAL;
45*8542734aSAndroid Build Coastguard Worker 
46*8542734aSAndroid Build Coastguard Worker     int ret =
47*8542734aSAndroid Build Coastguard Worker             RouteController::removeUsersFromUnreachableNetwork(mNetId, {{subPriority, uidRanges}});
48*8542734aSAndroid Build Coastguard Worker     if (ret) {
49*8542734aSAndroid Build Coastguard Worker         ALOGE("failed to remove users from unreachable network");
50*8542734aSAndroid Build Coastguard Worker         return ret;
51*8542734aSAndroid Build Coastguard Worker     }
52*8542734aSAndroid Build Coastguard Worker     removeFromUidRangeMap(uidRanges, subPriority);
53*8542734aSAndroid Build Coastguard Worker     return 0;
54*8542734aSAndroid Build Coastguard Worker }
55*8542734aSAndroid Build Coastguard Worker 
isValidSubPriority(int32_t priority)56*8542734aSAndroid Build Coastguard Worker bool UnreachableNetwork::isValidSubPriority(int32_t priority) {
57*8542734aSAndroid Build Coastguard Worker     return priority >= UidRanges::SUB_PRIORITY_HIGHEST &&
58*8542734aSAndroid Build Coastguard Worker            priority <= UidRanges::SUB_PRIORITY_LOWEST;
59*8542734aSAndroid Build Coastguard Worker }
60*8542734aSAndroid Build Coastguard Worker 
61*8542734aSAndroid Build Coastguard Worker }  // namespace net
62*8542734aSAndroid Build Coastguard Worker }  // namespace android
63