blob: b339e9674ecc2dfc2ca6c12beacd0847f3de2da4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
// Copyright 2014 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include "firewall_service.h"
#include "dbus_interface.h"
#include "iptables.h"
namespace firewalld {
FirewallService::FirewallService(
brillo::dbus_utils::ExportedObjectManager* object_manager)
: org::chromium::FirewalldAdaptor(&iptables_),
dbus_object_{object_manager, object_manager->GetBus(),
org::chromium::FirewalldAdaptor::GetObjectPath()} {}
void FirewallService::RegisterAsync(const CompletionAction& callback) {
RegisterWithDBusObject(&dbus_object_);
#if !defined(__ANDROID__)
// Track permission_broker's lifetime so that we can close firewall holes
// if/when permission_broker exits.
permission_broker_.reset(
new org::chromium::PermissionBroker::ObjectManagerProxy(
dbus_object_.GetBus()));
permission_broker_->SetPermissionBrokerRemovedCallback(
base::Bind(&FirewallService::OnPermissionBrokerRemoved,
weak_ptr_factory_.GetWeakPtr()));
#endif // __ANDROID__
dbus_object_.RegisterAsync(callback);
}
#ifdef __ANDROID__
// Get the binder interface for this service
android::sp<BinderInterface> FirewallService::GetBinderInterface() {
if (!binder_interface_.get()) {
binder_interface_ =
android::sp<BinderInterface>(new BinderInterface(&iptables_));
}
return binder_interface_;
}
#endif // __ANDROID__
#if !defined(__ANDROID__)
void FirewallService::OnPermissionBrokerRemoved(const dbus::ObjectPath& path) {
LOG(INFO) << "permission_broker died, plugging all firewall holes";
iptables_.PlugAllHoles();
}
#endif // __ANDROID__
} // namespace firewalld
|
