1*4d7e907cSAndroid Build Coastguard Worker /*
2*4d7e907cSAndroid Build Coastguard Worker * Copyright (C) 2023 The Android Open Source Project
3*4d7e907cSAndroid Build Coastguard Worker *
4*4d7e907cSAndroid Build Coastguard Worker * Licensed under the Apache License, Version 2.0 (the "License");
5*4d7e907cSAndroid Build Coastguard Worker * you may not use this file except in compliance with the License.
6*4d7e907cSAndroid Build Coastguard Worker * You may obtain a copy of the License at
7*4d7e907cSAndroid Build Coastguard Worker *
8*4d7e907cSAndroid Build Coastguard Worker * http://www.apache.org/licenses/LICENSE-2.0
9*4d7e907cSAndroid Build Coastguard Worker *
10*4d7e907cSAndroid Build Coastguard Worker * Unless required by applicable law or agreed to in writing, software
11*4d7e907cSAndroid Build Coastguard Worker * distributed under the License is distributed on an "AS IS" BASIS,
12*4d7e907cSAndroid Build Coastguard Worker * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*4d7e907cSAndroid Build Coastguard Worker * See the License for the specific language governing permissions and
14*4d7e907cSAndroid Build Coastguard Worker * limitations under the License.
15*4d7e907cSAndroid Build Coastguard Worker */
16*4d7e907cSAndroid Build Coastguard Worker
17*4d7e907cSAndroid Build Coastguard Worker //! Default implementation of the AuthGraph key exchange HAL.
18*4d7e907cSAndroid Build Coastguard Worker //!
19*4d7e907cSAndroid Build Coastguard Worker //! This implementation of the HAL is only intended to allow testing and policy compliance. A real
20*4d7e907cSAndroid Build Coastguard Worker //! implementation of the AuthGraph HAL would be implemented in a secure environment, and would not
21*4d7e907cSAndroid Build Coastguard Worker //! be independently registered with service manager (a secure component that uses AuthGraph would
22*4d7e907cSAndroid Build Coastguard Worker //! expose an entrypoint that allowed retrieval of the specific IAuthGraphKeyExchange instance that
23*4d7e907cSAndroid Build Coastguard Worker //! is correlated with the component).
24*4d7e907cSAndroid Build Coastguard Worker
25*4d7e907cSAndroid Build Coastguard Worker use authgraph_hal::service;
26*4d7e907cSAndroid Build Coastguard Worker use authgraph_nonsecure::LocalTa;
27*4d7e907cSAndroid Build Coastguard Worker use log::{error, info};
28*4d7e907cSAndroid Build Coastguard Worker
29*4d7e907cSAndroid Build Coastguard Worker static SERVICE_NAME: &str = "android.hardware.security.authgraph.IAuthGraphKeyExchange";
30*4d7e907cSAndroid Build Coastguard Worker static SERVICE_INSTANCE: &str = "nonsecure";
31*4d7e907cSAndroid Build Coastguard Worker
32*4d7e907cSAndroid Build Coastguard Worker /// Local error type for failures in the HAL service.
33*4d7e907cSAndroid Build Coastguard Worker #[derive(Debug, Clone)]
34*4d7e907cSAndroid Build Coastguard Worker struct HalServiceError(String);
35*4d7e907cSAndroid Build Coastguard Worker
36*4d7e907cSAndroid Build Coastguard Worker impl From<String> for HalServiceError {
from(s: String) -> Self37*4d7e907cSAndroid Build Coastguard Worker fn from(s: String) -> Self {
38*4d7e907cSAndroid Build Coastguard Worker Self(s)
39*4d7e907cSAndroid Build Coastguard Worker }
40*4d7e907cSAndroid Build Coastguard Worker }
41*4d7e907cSAndroid Build Coastguard Worker
main()42*4d7e907cSAndroid Build Coastguard Worker fn main() {
43*4d7e907cSAndroid Build Coastguard Worker if let Err(HalServiceError(e)) = inner_main() {
44*4d7e907cSAndroid Build Coastguard Worker panic!("HAL service failed: {:?}", e);
45*4d7e907cSAndroid Build Coastguard Worker }
46*4d7e907cSAndroid Build Coastguard Worker }
47*4d7e907cSAndroid Build Coastguard Worker
inner_main() -> Result<(), HalServiceError>48*4d7e907cSAndroid Build Coastguard Worker fn inner_main() -> Result<(), HalServiceError> {
49*4d7e907cSAndroid Build Coastguard Worker // Initialize Android logging.
50*4d7e907cSAndroid Build Coastguard Worker android_logger::init_once(
51*4d7e907cSAndroid Build Coastguard Worker android_logger::Config::default()
52*4d7e907cSAndroid Build Coastguard Worker .with_tag("authgraph-hal-nonsecure")
53*4d7e907cSAndroid Build Coastguard Worker .with_max_level(log::LevelFilter::Info)
54*4d7e907cSAndroid Build Coastguard Worker .with_log_buffer(android_logger::LogId::System),
55*4d7e907cSAndroid Build Coastguard Worker );
56*4d7e907cSAndroid Build Coastguard Worker // Redirect panic messages to logcat.
57*4d7e907cSAndroid Build Coastguard Worker std::panic::set_hook(Box::new(|panic_info| {
58*4d7e907cSAndroid Build Coastguard Worker error!("{}", panic_info);
59*4d7e907cSAndroid Build Coastguard Worker }));
60*4d7e907cSAndroid Build Coastguard Worker
61*4d7e907cSAndroid Build Coastguard Worker info!("Insecure AuthGraph key exchange HAL service is starting.");
62*4d7e907cSAndroid Build Coastguard Worker
63*4d7e907cSAndroid Build Coastguard Worker info!("Starting thread pool now.");
64*4d7e907cSAndroid Build Coastguard Worker binder::ProcessState::start_thread_pool();
65*4d7e907cSAndroid Build Coastguard Worker
66*4d7e907cSAndroid Build Coastguard Worker // Register the service
67*4d7e907cSAndroid Build Coastguard Worker let local_ta = LocalTa::new().map_err(|e| format!("Failed to create the TA because: {e:?}"))?;
68*4d7e907cSAndroid Build Coastguard Worker let service = service::AuthGraphService::new_as_binder(local_ta);
69*4d7e907cSAndroid Build Coastguard Worker let service_name = format!("{}/{}", SERVICE_NAME, SERVICE_INSTANCE);
70*4d7e907cSAndroid Build Coastguard Worker binder::add_service(&service_name, service.as_binder()).map_err(|e| {
71*4d7e907cSAndroid Build Coastguard Worker format!(
72*4d7e907cSAndroid Build Coastguard Worker "Failed to register service {} because of {:?}.",
73*4d7e907cSAndroid Build Coastguard Worker service_name, e
74*4d7e907cSAndroid Build Coastguard Worker )
75*4d7e907cSAndroid Build Coastguard Worker })?;
76*4d7e907cSAndroid Build Coastguard Worker
77*4d7e907cSAndroid Build Coastguard Worker info!("Successfully registered AuthGraph HAL services.");
78*4d7e907cSAndroid Build Coastguard Worker binder::ProcessState::join_thread_pool();
79*4d7e907cSAndroid Build Coastguard Worker info!("AuthGraph HAL service is terminating."); // should not reach here
80*4d7e907cSAndroid Build Coastguard Worker Ok(())
81*4d7e907cSAndroid Build Coastguard Worker }
82