| /* |
| * Copyright (C) 2019 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| #define LOG_TAG "apexd" |
| |
| #include "apex_key.h" |
| |
| #include <unordered_map> |
| |
| #include <android-base/file.h> |
| #include <android-base/strings.h> |
| |
| #include "apex_constants.h" |
| #include "apex_file.h" |
| #include "apexd_utils.h" |
| #include "status_or.h" |
| #include "string_log.h" |
| |
| namespace android { |
| namespace apex { |
| |
| namespace { |
| |
| std::unordered_map<std::string, const std::string> gScannedApexKeys; |
| |
| using KeyPair = std::pair<std::string, std::string>; |
| StatusOr<std::vector<KeyPair>> collectEmbedddedApexKeysFromDir( |
| const std::string& dir) { |
| LOG(INFO) << "Scanning " << dir << " for embedded keys"; |
| // list of <key_name, key_content> pairs |
| std::vector<KeyPair> ret; |
| if (access(dir.c_str(), F_OK) != 0 && errno == ENOENT) { |
| LOG(INFO) << "... does not exist. Skipping"; |
| return StatusOr<std::vector<KeyPair>>(std::move(ret)); |
| } |
| const bool scanBuiltinApexes = isPathForBuiltinApexes(dir); |
| if (!scanBuiltinApexes) { |
| return StatusOr<std::vector<KeyPair>>::MakeError( |
| StringLog() << "Can't scan embedded APEX keys from " << dir); |
| } |
| StatusOr<std::vector<std::string>> apex_files = |
| FindApexFilesByName(dir, scanBuiltinApexes); |
| if (!apex_files.Ok()) { |
| return StatusOr<std::vector<KeyPair>>::MakeError(apex_files.ErrorStatus()); |
| } |
| |
| for (const auto& file : *apex_files) { |
| StatusOr<ApexFile> apex_file = ApexFile::Open(file); |
| if (!apex_file.Ok()) { |
| return StatusOr<std::vector<KeyPair>>::MakeError( |
| StringLog() << "Failed to open " << file << " : " |
| << apex_file.ErrorMessage()); |
| } |
| // name of the key is the name of the apex that the key is bundled in |
| ret.push_back(std::make_pair(apex_file->GetManifest().name(), |
| apex_file->GetBundledPublicKey())); |
| } |
| return StatusOr<std::vector<KeyPair>>(std::move(ret)); |
| } |
| |
| Status updateScannedApexKeys(const std::vector<KeyPair>& key_pairs) { |
| for (const KeyPair& kp : key_pairs) { |
| if (gScannedApexKeys.find(kp.first) == gScannedApexKeys.end()) { |
| gScannedApexKeys.insert({kp.first, kp.second}); |
| } else { |
| const std::string& existing_key = gScannedApexKeys.at(kp.first); |
| if (existing_key != kp.second) { |
| return Status::Fail(StringLog() |
| << "Key for package " << kp.first |
| << " does not match with the existing key"); |
| } |
| } |
| } |
| return Status::Success(); |
| } |
| |
| } // namespace |
| |
| Status collectApexKeys(bool scanExternalKeys) { |
| for (const auto& dir : kApexPackageBuiltinDirs) { |
| StatusOr<std::vector<KeyPair>> key_pairs = |
| collectEmbedddedApexKeysFromDir(dir); |
| if (!key_pairs.Ok()) { |
| return Status::Fail(StringLog() << "Failed to collect keys from " << dir |
| << " : " << key_pairs.ErrorMessage()); |
| } |
| Status st = updateScannedApexKeys(*key_pairs); |
| if (!st.Ok()) { |
| return st; |
| } |
| } |
| return Status::Success(); |
| } |
| |
| StatusOr<const std::string> getApexKey(const std::string& key_name) { |
| if (gScannedApexKeys.find(key_name) == gScannedApexKeys.end()) { |
| return StatusOr<const std::string>::MakeError( |
| StringLog() << "No key found for package " << key_name); |
| } |
| return StatusOr<const std::string>(gScannedApexKeys[key_name]); |
| } |
| |
| } // namespace apex |
| } // namespace android |