1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
|
/*
* Copyright (C) 2022 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.android.sdksandbox.tests.cts.inprocess;
import static android.content.Context.MODE_PRIVATE;
import static com.google.common.truth.Truth.assertThat;
import static com.google.common.truth.Truth.assertWithMessage;
import static org.hamcrest.CoreMatchers.equalTo;
import static org.junit.Assume.assumeThat;
import android.app.sdksandbox.SdkSandboxManager;
import android.content.ComponentName;
import android.content.Context;
import android.content.Intent;
import android.content.ServiceConnection;
import android.content.pm.PackageInfo;
import android.content.pm.PackageManager;
import android.content.pm.PackageManager.PackageInfoFlags;
import android.content.pm.ResolveInfo;
import android.content.pm.ServiceInfo;
import android.os.IBinder;
import android.os.Process;
import android.os.SELinux;
import androidx.test.platform.app.InstrumentationRegistry;
import com.android.adservices.AdServicesCommon;
import org.junit.Ignore;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.junit.runners.JUnit4;
import java.io.BufferedReader;
import java.io.File;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.util.List;
import java.util.concurrent.CountDownLatch;
import java.util.concurrent.TimeUnit;
/**
* Tests to check some basic properties of the Sdk Sandbox processes.
*/
@RunWith(JUnit4.class)
public class SdkSandboxConfigurationTest {
private static final String TEST_PKG = "com.android.sdksandbox.tests.cts.inprocesstests";
/**
* Tests that uid belongs to the sdk sandbox processes uid range.
*/
@Test
public void testUidBelongsToSdkSandboxRange() throws Exception {
int myUid = Process.myUid();
assertWithMessage(myUid + " is not a SdkSandbox uid").that(Process.isSdkSandbox()).isTrue();
}
/**
* Tests that sdk sandbox processes are running under the {@code sdk_sandbox} selinux domain.
*/
@Test
public void testCorrectSelinuxDomain() throws Exception {
final String ctx = SELinux.getContext();
assertThat(ctx).contains("u:r:sdk_sandbox");
}
/** Tests that sdk sandbox SDK minimum and target versions are correct. */
@Test
public void testCorrectSdkVersion() throws Exception {
final Context ctx = InstrumentationRegistry.getInstrumentation().getTargetContext();
final PackageManager pm = ctx.getPackageManager();
final PackageInfo info = pm.getPackageInfo(ctx.getPackageName(), PackageInfoFlags.of(0));
int minSdkVersion = info.applicationInfo.minSdkVersion;
assertThat(minSdkVersion).isEqualTo(33);
int targetSdkVersion = info.applicationInfo.targetSdkVersion;
assertThat(targetSdkVersion).isEqualTo(33);
}
/**
* Tests that client app is visible to the sdk sandbox.
*/
@Test
public void testClientAppIsVisibleToSdkSandbox() throws Exception {
final Context ctx = InstrumentationRegistry.getInstrumentation().getTargetContext();
final PackageManager pm = ctx.getPackageManager();
final PackageInfo info = pm.getPackageInfo(TEST_PKG, PackageInfoFlags.of(0));
assertThat(info.applicationInfo.uid).isEqualTo(
Process.getAppUidForSdkSandboxUid(Process.myUid()));
}
/**
* Tests that {@link Context#getDataDir()} returns correct value for the CE storage of the
* sak sandbox.
*/
@Test
public void testGetDataDir_CE() throws Exception {
final Context ctx = InstrumentationRegistry.getInstrumentation().getTargetContext();
final File dir = ctx.getDataDir();
assertThat(dir.getAbsolutePath()).isEqualTo(
"/data/misc_ce/0/sdksandbox/" + TEST_PKG + "/shared");
}
/**
* Tests that {@link Context#getDataDir()} returns correct value for the DE storage of the sak
* sandbox.
*/
@Test
public void testGetDataDir_DE() throws Exception {
final Context ctx =
InstrumentationRegistry.getInstrumentation()
.getTargetContext()
.createDeviceProtectedStorageContext();
final File dir = ctx.getDataDir();
assertThat(dir.getAbsolutePath()).isEqualTo(
"/data/misc_de/0/sdksandbox/" + TEST_PKG + "/shared");
}
/** Tests that sdk sandbox process can write to it's CE storage. */
@Test
public void testCanWriteToDataDir_CE() throws Exception {
final Context ctx = InstrumentationRegistry.getInstrumentation().getTargetContext();
try (OutputStreamWriter writer = new OutputStreamWriter(
ctx.openFileOutput("random_ce_file", MODE_PRIVATE))) {
writer.write("I am an sdk sandbox");
}
try (BufferedReader reader = new BufferedReader(
new InputStreamReader(ctx.openFileInput("random_ce_file")))) {
String line = reader.readLine();
assertThat(line).isEqualTo("I am an sdk sandbox");
}
}
/** Tests that sdk sandbox process can write to it's DE storage. */
@Test
public void testCanWriteToDataDir_DE() throws Exception {
final Context ctx =
InstrumentationRegistry.getInstrumentation()
.getTargetContext()
.createDeviceProtectedStorageContext();
try (OutputStreamWriter writer = new OutputStreamWriter(
ctx.openFileOutput("random_de_file", MODE_PRIVATE))) {
writer.write("I am also an sdk sandbox");
}
try (BufferedReader reader = new BufferedReader(
new InputStreamReader(ctx.openFileInput("random_de_file")))) {
String line = reader.readLine();
assertThat(line).isEqualTo("I am also an sdk sandbox");
}
}
/** Tests that sdk sandbox process can resolve the package that provides AdServices APIs. */
@Test
@Ignore("b/243146745")
public void testCanResolveAndBindToAdServicesApiPackage() throws Exception {
// Only run this test if sdk sandbox is enabled.
assumeThat(
SdkSandboxManager.getSdkSandboxState(),
equalTo(SdkSandboxManager.SDK_SANDBOX_STATE_ENABLED_PROCESS_ISOLATION));
final Context ctx = InstrumentationRegistry.getInstrumentation().getTargetContext();
// First check that we can resolve the adservices apk
final PackageManager pm = ctx.getPackageManager();
final Intent resolveIntent = new Intent(AdServicesCommon.ACTION_TOPICS_SERVICE);
final List<ResolveInfo> services =
pm.queryIntentServices(
resolveIntent,
PackageManager.ResolveInfoFlags.of(
PackageManager.GET_SERVICES
| PackageManager.MATCH_SYSTEM_ONLY
| PackageManager.MATCH_DIRECT_BOOT_AWARE
| PackageManager.MATCH_DIRECT_BOOT_UNAWARE));
assertThat(services).hasSize(1);
final ServiceInfo serviceInfo = services.get(0).serviceInfo;
// Now check that we can bind to the adservices api process.
final Intent serviceIntent =
new Intent()
.setComponent(new ComponentName(serviceInfo.packageName, serviceInfo.name));
final CountDownLatch latch = new CountDownLatch(1);
final ServiceConnection conn =
new ServiceConnection() {
@Override
public void onServiceConnected(ComponentName name, IBinder service) {
latch.countDown();
}
@Override
public void onServiceDisconnected(ComponentName name) {}
};
final boolean ret = ctx.bindService(serviceIntent, conn, Context.BIND_AUTO_CREATE);
try {
assertThat(ret).isTrue();
assertThat(latch.await(3, TimeUnit.SECONDS)).isTrue();
} finally {
ctx.unbindService(conn);
}
}
}
|
