1*d57664e9SAndroid Build Coastguard Worker /*
2*d57664e9SAndroid Build Coastguard Worker * Copyright (C) 2018 The Android Open Source Project
3*d57664e9SAndroid Build Coastguard Worker *
4*d57664e9SAndroid Build Coastguard Worker * Licensed under the Apache License, Version 2.0 (the "License");
5*d57664e9SAndroid Build Coastguard Worker * you may not use this file except in compliance with the License.
6*d57664e9SAndroid Build Coastguard Worker * You may obtain a copy of the License at
7*d57664e9SAndroid Build Coastguard Worker *
8*d57664e9SAndroid Build Coastguard Worker * http://www.apache.org/licenses/LICENSE-2.0
9*d57664e9SAndroid Build Coastguard Worker *
10*d57664e9SAndroid Build Coastguard Worker * Unless required by applicable law or agreed to in writing, software
11*d57664e9SAndroid Build Coastguard Worker * distributed under the License is distributed on an "AS IS" BASIS,
12*d57664e9SAndroid Build Coastguard Worker * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*d57664e9SAndroid Build Coastguard Worker * See the License for the specific language governing permissions and
14*d57664e9SAndroid Build Coastguard Worker * limitations under the License.
15*d57664e9SAndroid Build Coastguard Worker */
16*d57664e9SAndroid Build Coastguard Worker
17*d57664e9SAndroid Build Coastguard Worker #include "idmap2/FileUtils.h"
18*d57664e9SAndroid Build Coastguard Worker
19*d57664e9SAndroid Build Coastguard Worker #include <random>
20*d57664e9SAndroid Build Coastguard Worker #include <string>
21*d57664e9SAndroid Build Coastguard Worker #include <string_view>
22*d57664e9SAndroid Build Coastguard Worker
23*d57664e9SAndroid Build Coastguard Worker #include "android-base/file.h"
24*d57664e9SAndroid Build Coastguard Worker #include "android-base/macros.h"
25*d57664e9SAndroid Build Coastguard Worker #include "android-base/strings.h"
26*d57664e9SAndroid Build Coastguard Worker #include "private/android_filesystem_config.h"
27*d57664e9SAndroid Build Coastguard Worker
28*d57664e9SAndroid Build Coastguard Worker namespace android::idmap2::utils {
29*d57664e9SAndroid Build Coastguard Worker
30*d57664e9SAndroid Build Coastguard Worker #ifdef __ANDROID__
UidHasWriteAccessToPath(uid_t uid,const std::string & path)31*d57664e9SAndroid Build Coastguard Worker bool UidHasWriteAccessToPath(uid_t uid, const std::string& path) {
32*d57664e9SAndroid Build Coastguard Worker // resolve symlinks and relative paths; the directories must exist
33*d57664e9SAndroid Build Coastguard Worker std::string canonical_path;
34*d57664e9SAndroid Build Coastguard Worker if (!base::Realpath(base::Dirname(path), &canonical_path)) {
35*d57664e9SAndroid Build Coastguard Worker return false;
36*d57664e9SAndroid Build Coastguard Worker }
37*d57664e9SAndroid Build Coastguard Worker
38*d57664e9SAndroid Build Coastguard Worker if (base::StartsWith(canonical_path, kIdmapCacheDir) &&
39*d57664e9SAndroid Build Coastguard Worker (canonical_path.size() == kIdmapCacheDir.size() ||
40*d57664e9SAndroid Build Coastguard Worker canonical_path[kIdmapCacheDir.size()] == '/')) {
41*d57664e9SAndroid Build Coastguard Worker // limit access to /data/resource-cache to root and system
42*d57664e9SAndroid Build Coastguard Worker return uid == AID_ROOT || uid == AID_SYSTEM;
43*d57664e9SAndroid Build Coastguard Worker }
44*d57664e9SAndroid Build Coastguard Worker return true;
45*d57664e9SAndroid Build Coastguard Worker }
46*d57664e9SAndroid Build Coastguard Worker #else
47*d57664e9SAndroid Build Coastguard Worker bool UidHasWriteAccessToPath(uid_t uid ATTRIBUTE_UNUSED, const std::string& path ATTRIBUTE_UNUSED) {
48*d57664e9SAndroid Build Coastguard Worker return true;
49*d57664e9SAndroid Build Coastguard Worker }
50*d57664e9SAndroid Build Coastguard Worker #endif
51*d57664e9SAndroid Build Coastguard Worker
RandomStringForPath(size_t length)52*d57664e9SAndroid Build Coastguard Worker std::string RandomStringForPath(size_t length) {
53*d57664e9SAndroid Build Coastguard Worker constexpr std::string_view kChars =
54*d57664e9SAndroid Build Coastguard Worker "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
55*d57664e9SAndroid Build Coastguard Worker
56*d57664e9SAndroid Build Coastguard Worker std::string out_rand;
57*d57664e9SAndroid Build Coastguard Worker out_rand.resize(length);
58*d57664e9SAndroid Build Coastguard Worker
59*d57664e9SAndroid Build Coastguard Worker static thread_local std::random_device rd;
60*d57664e9SAndroid Build Coastguard Worker std::uniform_int_distribution<int> dist(0, kChars.size() - 1);
61*d57664e9SAndroid Build Coastguard Worker for (size_t i = 0; i < length; i++) {
62*d57664e9SAndroid Build Coastguard Worker out_rand[i] = kChars[dist(rd)];
63*d57664e9SAndroid Build Coastguard Worker }
64*d57664e9SAndroid Build Coastguard Worker return out_rand;
65*d57664e9SAndroid Build Coastguard Worker }
66*d57664e9SAndroid Build Coastguard Worker
67*d57664e9SAndroid Build Coastguard Worker } // namespace android::idmap2::utils
68