xref: /aosp_15_r20/hardware/interfaces/security/authgraph/default/src/main.rs (revision 4d7e907c777eeecc4c5bd7cf640a754fac206ff7)
1*4d7e907cSAndroid Build Coastguard Worker /*
2*4d7e907cSAndroid Build Coastguard Worker  * Copyright (C) 2023 The Android Open Source Project
3*4d7e907cSAndroid Build Coastguard Worker  *
4*4d7e907cSAndroid Build Coastguard Worker  * Licensed under the Apache License, Version 2.0 (the "License");
5*4d7e907cSAndroid Build Coastguard Worker  * you may not use this file except in compliance with the License.
6*4d7e907cSAndroid Build Coastguard Worker  * You may obtain a copy of the License at
7*4d7e907cSAndroid Build Coastguard Worker  *
8*4d7e907cSAndroid Build Coastguard Worker  *      http://www.apache.org/licenses/LICENSE-2.0
9*4d7e907cSAndroid Build Coastguard Worker  *
10*4d7e907cSAndroid Build Coastguard Worker  * Unless required by applicable law or agreed to in writing, software
11*4d7e907cSAndroid Build Coastguard Worker  * distributed under the License is distributed on an "AS IS" BASIS,
12*4d7e907cSAndroid Build Coastguard Worker  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*4d7e907cSAndroid Build Coastguard Worker  * See the License for the specific language governing permissions and
14*4d7e907cSAndroid Build Coastguard Worker  * limitations under the License.
15*4d7e907cSAndroid Build Coastguard Worker  */
16*4d7e907cSAndroid Build Coastguard Worker 
17*4d7e907cSAndroid Build Coastguard Worker //! Default implementation of the AuthGraph key exchange HAL.
18*4d7e907cSAndroid Build Coastguard Worker //!
19*4d7e907cSAndroid Build Coastguard Worker //! This implementation of the HAL is only intended to allow testing and policy compliance.  A real
20*4d7e907cSAndroid Build Coastguard Worker //! implementation of the AuthGraph HAL would be implemented in a secure environment, and would not
21*4d7e907cSAndroid Build Coastguard Worker //! be independently registered with service manager (a secure component that uses AuthGraph would
22*4d7e907cSAndroid Build Coastguard Worker //! expose an entrypoint that allowed retrieval of the specific IAuthGraphKeyExchange instance that
23*4d7e907cSAndroid Build Coastguard Worker //! is correlated with the component).
24*4d7e907cSAndroid Build Coastguard Worker 
25*4d7e907cSAndroid Build Coastguard Worker use authgraph_hal::service;
26*4d7e907cSAndroid Build Coastguard Worker use authgraph_nonsecure::LocalTa;
27*4d7e907cSAndroid Build Coastguard Worker use log::{error, info};
28*4d7e907cSAndroid Build Coastguard Worker 
29*4d7e907cSAndroid Build Coastguard Worker static SERVICE_NAME: &str = "android.hardware.security.authgraph.IAuthGraphKeyExchange";
30*4d7e907cSAndroid Build Coastguard Worker static SERVICE_INSTANCE: &str = "nonsecure";
31*4d7e907cSAndroid Build Coastguard Worker 
32*4d7e907cSAndroid Build Coastguard Worker /// Local error type for failures in the HAL service.
33*4d7e907cSAndroid Build Coastguard Worker #[derive(Debug, Clone)]
34*4d7e907cSAndroid Build Coastguard Worker struct HalServiceError(String);
35*4d7e907cSAndroid Build Coastguard Worker 
36*4d7e907cSAndroid Build Coastguard Worker impl From<String> for HalServiceError {
from(s: String) -> Self37*4d7e907cSAndroid Build Coastguard Worker     fn from(s: String) -> Self {
38*4d7e907cSAndroid Build Coastguard Worker         Self(s)
39*4d7e907cSAndroid Build Coastguard Worker     }
40*4d7e907cSAndroid Build Coastguard Worker }
41*4d7e907cSAndroid Build Coastguard Worker 
main()42*4d7e907cSAndroid Build Coastguard Worker fn main() {
43*4d7e907cSAndroid Build Coastguard Worker     if let Err(HalServiceError(e)) = inner_main() {
44*4d7e907cSAndroid Build Coastguard Worker         panic!("HAL service failed: {:?}", e);
45*4d7e907cSAndroid Build Coastguard Worker     }
46*4d7e907cSAndroid Build Coastguard Worker }
47*4d7e907cSAndroid Build Coastguard Worker 
inner_main() -> Result<(), HalServiceError>48*4d7e907cSAndroid Build Coastguard Worker fn inner_main() -> Result<(), HalServiceError> {
49*4d7e907cSAndroid Build Coastguard Worker     // Initialize Android logging.
50*4d7e907cSAndroid Build Coastguard Worker     android_logger::init_once(
51*4d7e907cSAndroid Build Coastguard Worker         android_logger::Config::default()
52*4d7e907cSAndroid Build Coastguard Worker             .with_tag("authgraph-hal-nonsecure")
53*4d7e907cSAndroid Build Coastguard Worker             .with_max_level(log::LevelFilter::Info)
54*4d7e907cSAndroid Build Coastguard Worker             .with_log_buffer(android_logger::LogId::System),
55*4d7e907cSAndroid Build Coastguard Worker     );
56*4d7e907cSAndroid Build Coastguard Worker     // Redirect panic messages to logcat.
57*4d7e907cSAndroid Build Coastguard Worker     std::panic::set_hook(Box::new(|panic_info| {
58*4d7e907cSAndroid Build Coastguard Worker         error!("{}", panic_info);
59*4d7e907cSAndroid Build Coastguard Worker     }));
60*4d7e907cSAndroid Build Coastguard Worker 
61*4d7e907cSAndroid Build Coastguard Worker     info!("Insecure AuthGraph key exchange HAL service is starting.");
62*4d7e907cSAndroid Build Coastguard Worker 
63*4d7e907cSAndroid Build Coastguard Worker     info!("Starting thread pool now.");
64*4d7e907cSAndroid Build Coastguard Worker     binder::ProcessState::start_thread_pool();
65*4d7e907cSAndroid Build Coastguard Worker 
66*4d7e907cSAndroid Build Coastguard Worker     // Register the service
67*4d7e907cSAndroid Build Coastguard Worker     let local_ta = LocalTa::new().map_err(|e| format!("Failed to create the TA because: {e:?}"))?;
68*4d7e907cSAndroid Build Coastguard Worker     let service = service::AuthGraphService::new_as_binder(local_ta);
69*4d7e907cSAndroid Build Coastguard Worker     let service_name = format!("{}/{}", SERVICE_NAME, SERVICE_INSTANCE);
70*4d7e907cSAndroid Build Coastguard Worker     binder::add_service(&service_name, service.as_binder()).map_err(|e| {
71*4d7e907cSAndroid Build Coastguard Worker         format!(
72*4d7e907cSAndroid Build Coastguard Worker             "Failed to register service {} because of {:?}.",
73*4d7e907cSAndroid Build Coastguard Worker             service_name, e
74*4d7e907cSAndroid Build Coastguard Worker         )
75*4d7e907cSAndroid Build Coastguard Worker     })?;
76*4d7e907cSAndroid Build Coastguard Worker 
77*4d7e907cSAndroid Build Coastguard Worker     info!("Successfully registered AuthGraph HAL services.");
78*4d7e907cSAndroid Build Coastguard Worker     binder::ProcessState::join_thread_pool();
79*4d7e907cSAndroid Build Coastguard Worker     info!("AuthGraph HAL service is terminating."); // should not reach here
80*4d7e907cSAndroid Build Coastguard Worker     Ok(())
81*4d7e907cSAndroid Build Coastguard Worker }
82