Merge "vold: remove checkEncryption" am: 2d9777bfbf
am: 15c0d3e5d0
Original change: https://android-review.googlesource.com/c/platform/system/vold/+/1363339 Change-Id: I23b9a01632b61a92896ae83e2152fa047dd85c48
This commit is contained in:
commit
4cd238b900
7 changed files with 0 additions and 197 deletions
|
@ -110,7 +110,6 @@ cc_library_static {
|
||||||
srcs: [
|
srcs: [
|
||||||
"AppFuseUtil.cpp",
|
"AppFuseUtil.cpp",
|
||||||
"Benchmark.cpp",
|
"Benchmark.cpp",
|
||||||
"CheckEncryption.cpp",
|
|
||||||
"Checkpoint.cpp",
|
"Checkpoint.cpp",
|
||||||
"CryptoType.cpp",
|
"CryptoType.cpp",
|
||||||
"Devmapper.cpp",
|
"Devmapper.cpp",
|
||||||
|
|
|
@ -1,149 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (C) 2017 The Android Open Source Project
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "CheckEncryption.h"
|
|
||||||
#include "FileDeviceUtils.h"
|
|
||||||
#include "Utils.h"
|
|
||||||
#include "VolumeManager.h"
|
|
||||||
|
|
||||||
#include <android-base/file.h>
|
|
||||||
#include <android-base/logging.h>
|
|
||||||
#include <android-base/unique_fd.h>
|
|
||||||
#include <cutils/iosched_policy.h>
|
|
||||||
#include <private/android_filesystem_config.h>
|
|
||||||
|
|
||||||
#include <sstream>
|
|
||||||
|
|
||||||
#include <sys/resource.h>
|
|
||||||
#include <sys/time.h>
|
|
||||||
#include <unistd.h>
|
|
||||||
|
|
||||||
#include <assert.h>
|
|
||||||
#include <fcntl.h>
|
|
||||||
#include <linux/fs.h>
|
|
||||||
#include <sys/stat.h>
|
|
||||||
#include <sys/types.h>
|
|
||||||
#include <unistd.h>
|
|
||||||
|
|
||||||
#include <fcntl.h>
|
|
||||||
#include <sys/stat.h>
|
|
||||||
#include <sys/types.h>
|
|
||||||
|
|
||||||
using android::base::unique_fd;
|
|
||||||
|
|
||||||
using android::base::ReadFileToString;
|
|
||||||
using android::base::WriteStringToFile;
|
|
||||||
|
|
||||||
namespace android {
|
|
||||||
namespace vold {
|
|
||||||
|
|
||||||
constexpr uint32_t max_extents = 32;
|
|
||||||
constexpr size_t bytecount = 8;
|
|
||||||
constexpr int repeats = 256;
|
|
||||||
|
|
||||||
bool check_file(const std::string& needle) {
|
|
||||||
LOG(DEBUG) << "checkEncryption check_file: " << needle;
|
|
||||||
auto haystack = android::vold::BlockDeviceForPath(needle);
|
|
||||||
if (haystack.empty()) {
|
|
||||||
LOG(ERROR) << "Failed to find device for path: " << needle;
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
std::string randombytes;
|
|
||||||
if (ReadRandomBytes(bytecount, randombytes) != 0) {
|
|
||||||
LOG(ERROR) << "Failed to read random bytes";
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
std::string randomhex;
|
|
||||||
StrToHex(randombytes, randomhex);
|
|
||||||
std::ostringstream os;
|
|
||||||
for (int i = 0; i < repeats; i++) os << randomhex;
|
|
||||||
auto towrite = os.str();
|
|
||||||
|
|
||||||
if (access(needle.c_str(), F_OK) == 0) {
|
|
||||||
if (unlink(needle.c_str()) != 0) {
|
|
||||||
PLOG(ERROR) << "Failed to unlink " << needle;
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
LOG(DEBUG) << "Writing to " << needle;
|
|
||||||
if (!WriteStringToFile(towrite, needle)) {
|
|
||||||
PLOG(ERROR) << "Failed to write " << needle;
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
sync();
|
|
||||||
|
|
||||||
unique_fd haystack_fd(open(haystack.c_str(), O_RDONLY | O_CLOEXEC));
|
|
||||||
if (haystack_fd.get() == -1) {
|
|
||||||
PLOG(ERROR) << "Failed to open " << haystack;
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
auto fiemap = PathFiemap(needle, max_extents);
|
|
||||||
|
|
||||||
std::string area;
|
|
||||||
for (uint32_t i = 0; i < fiemap->fm_mapped_extents; i++) {
|
|
||||||
auto xt = &(fiemap->fm_extents[i]);
|
|
||||||
LOG(DEBUG) << "Extent " << i << " at " << xt->fe_physical << " length " << xt->fe_length;
|
|
||||||
if (lseek64(haystack_fd.get(), xt->fe_physical, SEEK_SET) == -1) {
|
|
||||||
PLOG(ERROR) << "Failed lseek";
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
auto toread = xt->fe_length;
|
|
||||||
while (toread > 0) {
|
|
||||||
char buf[BUFSIZ];
|
|
||||||
size_t wlen =
|
|
||||||
static_cast<size_t>(std::min(static_cast<typeof(toread)>(sizeof(buf)), toread));
|
|
||||||
auto l = read(haystack_fd.get(), buf, wlen);
|
|
||||||
if (l < 1) {
|
|
||||||
PLOG(ERROR) << "Failed read";
|
|
||||||
if (errno != EINTR) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
area.append(buf, l);
|
|
||||||
toread -= l;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
LOG(DEBUG) << "Searching " << area.size() << " bytes of " << needle;
|
|
||||||
LOG(DEBUG) << "First position of blob: " << area.find(randomhex);
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
int CheckEncryption(const std::string& path) {
|
|
||||||
auto deNeedle(path);
|
|
||||||
deNeedle += "/misc";
|
|
||||||
if (android::vold::PrepareDir(deNeedle, 01771, AID_SYSTEM, AID_MISC)) {
|
|
||||||
return -1;
|
|
||||||
}
|
|
||||||
deNeedle += "/vold";
|
|
||||||
if (android::vold::PrepareDir(deNeedle, 0700, AID_ROOT, AID_ROOT)) {
|
|
||||||
return -1;
|
|
||||||
}
|
|
||||||
deNeedle += "/checkEncryption";
|
|
||||||
|
|
||||||
auto neNeedle(path);
|
|
||||||
neNeedle += "/unencrypted/checkEncryption";
|
|
||||||
|
|
||||||
check_file(deNeedle);
|
|
||||||
check_file(neNeedle);
|
|
||||||
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
} // namespace vold
|
|
||||||
} // namespace android
|
|
|
@ -1,31 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (C) 2017 The Android Open Source Project
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#ifndef ANDROID_VOLD_CHECK_ENCRYPTION_H
|
|
||||||
#define ANDROID_VOLD_CHECK_ENCRYPTION_H
|
|
||||||
|
|
||||||
#include <string>
|
|
||||||
|
|
||||||
namespace android {
|
|
||||||
namespace vold {
|
|
||||||
|
|
||||||
/* Check encryption of private volume mounted at the given path */
|
|
||||||
int CheckEncryption(const std::string& path);
|
|
||||||
|
|
||||||
} // namespace vold
|
|
||||||
} // namespace android
|
|
||||||
|
|
||||||
#endif
|
|
|
@ -30,7 +30,6 @@
|
||||||
#include <thread>
|
#include <thread>
|
||||||
|
|
||||||
#include "Benchmark.h"
|
#include "Benchmark.h"
|
||||||
#include "CheckEncryption.h"
|
|
||||||
#include "Checkpoint.h"
|
#include "Checkpoint.h"
|
||||||
#include "FsCrypt.h"
|
#include "FsCrypt.h"
|
||||||
#include "IdleMaint.h"
|
#include "IdleMaint.h"
|
||||||
|
@ -351,17 +350,6 @@ binder::Status VoldNativeService::benchmark(
|
||||||
return Ok();
|
return Ok();
|
||||||
}
|
}
|
||||||
|
|
||||||
binder::Status VoldNativeService::checkEncryption(const std::string& volId) {
|
|
||||||
ENFORCE_SYSTEM_OR_ROOT;
|
|
||||||
CHECK_ARGUMENT_ID(volId);
|
|
||||||
ACQUIRE_LOCK;
|
|
||||||
|
|
||||||
std::string path;
|
|
||||||
auto status = pathForVolId(volId, &path);
|
|
||||||
if (!status.isOk()) return status;
|
|
||||||
return translate(android::vold::CheckEncryption(path));
|
|
||||||
}
|
|
||||||
|
|
||||||
binder::Status VoldNativeService::moveStorage(
|
binder::Status VoldNativeService::moveStorage(
|
||||||
const std::string& fromVolId, const std::string& toVolId,
|
const std::string& fromVolId, const std::string& toVolId,
|
||||||
const android::sp<android::os::IVoldTaskListener>& listener) {
|
const android::sp<android::os::IVoldTaskListener>& listener) {
|
||||||
|
|
|
@ -59,7 +59,6 @@ class VoldNativeService : public BinderService<VoldNativeService>, public os::Bn
|
||||||
binder::Status format(const std::string& volId, const std::string& fsType);
|
binder::Status format(const std::string& volId, const std::string& fsType);
|
||||||
binder::Status benchmark(const std::string& volId,
|
binder::Status benchmark(const std::string& volId,
|
||||||
const android::sp<android::os::IVoldTaskListener>& listener);
|
const android::sp<android::os::IVoldTaskListener>& listener);
|
||||||
binder::Status checkEncryption(const std::string& volId);
|
|
||||||
|
|
||||||
binder::Status moveStorage(const std::string& fromVolId, const std::string& toVolId,
|
binder::Status moveStorage(const std::string& fromVolId, const std::string& toVolId,
|
||||||
const android::sp<android::os::IVoldTaskListener>& listener);
|
const android::sp<android::os::IVoldTaskListener>& listener);
|
||||||
|
|
|
@ -48,7 +48,6 @@ interface IVold {
|
||||||
void unmount(@utf8InCpp String volId);
|
void unmount(@utf8InCpp String volId);
|
||||||
void format(@utf8InCpp String volId, @utf8InCpp String fsType);
|
void format(@utf8InCpp String volId, @utf8InCpp String fsType);
|
||||||
void benchmark(@utf8InCpp String volId, IVoldTaskListener listener);
|
void benchmark(@utf8InCpp String volId, IVoldTaskListener listener);
|
||||||
void checkEncryption(@utf8InCpp String volId);
|
|
||||||
|
|
||||||
void moveStorage(@utf8InCpp String fromVolId, @utf8InCpp String toVolId,
|
void moveStorage(@utf8InCpp String fromVolId, @utf8InCpp String toVolId,
|
||||||
IVoldTaskListener listener);
|
IVoldTaskListener listener);
|
||||||
|
|
2
vdc.cpp
2
vdc.cpp
|
@ -105,8 +105,6 @@ int main(int argc, char** argv) {
|
||||||
checkStatus(args, vold->shutdown());
|
checkStatus(args, vold->shutdown());
|
||||||
} else if (args[0] == "volume" && args[1] == "reset") {
|
} else if (args[0] == "volume" && args[1] == "reset") {
|
||||||
checkStatus(args, vold->reset());
|
checkStatus(args, vold->reset());
|
||||||
} else if (args[0] == "cryptfs" && args[1] == "checkEncryption" && args.size() == 3) {
|
|
||||||
checkStatus(args, vold->checkEncryption(args[2]));
|
|
||||||
} else if (args[0] == "cryptfs" && args[1] == "mountFstab" && args.size() == 4) {
|
} else if (args[0] == "cryptfs" && args[1] == "mountFstab" && args.size() == 4) {
|
||||||
checkStatus(args, vold->mountFstab(args[2], args[3]));
|
checkStatus(args, vold->mountFstab(args[2], args[3]));
|
||||||
} else if (args[0] == "cryptfs" && args[1] == "encryptFstab" && args.size() == 4) {
|
} else if (args[0] == "cryptfs" && args[1] == "encryptFstab" && args.size() == 4) {
|
||||||
|
|
Loading…
Reference in a new issue