Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 1 | // Copyright 2020, The Android Open Source Project |
| 2 | // |
| 3 | // Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | // you may not use this file except in compliance with the License. |
| 5 | // You may obtain a copy of the License at |
| 6 | // |
| 7 | // http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | // |
| 9 | // Unless required by applicable law or agreed to in writing, software |
| 10 | // distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | // See the License for the specific language governing permissions and |
| 13 | // limitations under the License. |
| 14 | |
Janis Danisevskis | e242b03 | 2020-11-17 15:57:51 -0800 | [diff] [blame] | 15 | //! This crate implements the Keystore 2.0 service entry point. |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 16 | |
Janis Danisevskis | 7a1cf38 | 2020-11-20 11:22:14 -0800 | [diff] [blame] | 17 | use keystore2::apc::ApcManager; |
Janis Danisevskis | 9f10a6a | 2021-01-18 16:45:21 +0000 | [diff] [blame] | 18 | use keystore2::authorization::AuthorizationManager; |
Janis Danisevskis | b1673db | 2021-02-08 18:11:57 -0800 | [diff] [blame] | 19 | use keystore2::globals::ENFORCEMENTS; |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 20 | use keystore2::service::KeystoreService; |
Hasini Gunasinghe | da89555 | 2021-01-27 19:34:37 +0000 | [diff] [blame^] | 21 | use keystore2::user_manager::UserManager; |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 22 | use log::{error, info}; |
Janis Danisevskis | b1673db | 2021-02-08 18:11:57 -0800 | [diff] [blame] | 23 | use std::{panic, path::Path, sync::mpsc::channel}; |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 24 | |
| 25 | static KS2_SERVICE_NAME: &str = "android.system.keystore2"; |
Janis Danisevskis | 7a1cf38 | 2020-11-20 11:22:14 -0800 | [diff] [blame] | 26 | static APC_SERVICE_NAME: &str = "android.security.apc"; |
Janis Danisevskis | 9f10a6a | 2021-01-18 16:45:21 +0000 | [diff] [blame] | 27 | static AUTHORIZATION_SERVICE_NAME: &str = "android.security.authorization"; |
Hasini Gunasinghe | da89555 | 2021-01-27 19:34:37 +0000 | [diff] [blame^] | 28 | static USER_MANAGER_SERVICE_NAME: &str = "android.security.usermanager"; |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 29 | |
| 30 | /// Keystore 2.0 takes one argument which is a path indicating its designated working directory. |
| 31 | fn main() { |
| 32 | // Initialize android logging. |
| 33 | android_logger::init_once( |
| 34 | android_logger::Config::default().with_tag("keystore2").with_min_level(log::Level::Debug), |
| 35 | ); |
| 36 | // Redirect panic messages to logcat. |
| 37 | panic::set_hook(Box::new(|panic_info| { |
| 38 | error!("{}", panic_info); |
| 39 | })); |
| 40 | |
| 41 | // Saying hi. |
| 42 | info!("Keystore2 is starting."); |
| 43 | |
Janis Danisevskis | b00ebd0 | 2021-02-02 21:52:24 -0800 | [diff] [blame] | 44 | // Initialize the per boot database. |
| 45 | let _keep_me_alive = keystore2::database::KeystoreDB::keep_perboot_db_alive() |
| 46 | .expect("Failed to initialize the perboot database."); |
| 47 | |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 48 | let mut args = std::env::args(); |
| 49 | args.next().expect("That's odd. How is there not even a first argument?"); |
Janis Danisevskis | bf15d73 | 2020-12-08 10:35:26 -0800 | [diff] [blame] | 50 | |
Janis Danisevskis | 3f2955c | 2021-02-02 21:53:35 -0800 | [diff] [blame] | 51 | // Keystore 2.0 cannot change to the database directory (typically /data/misc/keystore) on |
| 52 | // startup as Keystore 1.0 did because Keystore 2.0 is intended to run much earlier than |
| 53 | // Keystore 1.0. Instead we set a global variable to the database path. |
Janis Danisevskis | bf15d73 | 2020-12-08 10:35:26 -0800 | [diff] [blame] | 54 | // For the ground truth check the service startup rule for init (typically in keystore2.rc). |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 55 | if let Some(dir) = args.next() { |
Janis Danisevskis | 3f2955c | 2021-02-02 21:53:35 -0800 | [diff] [blame] | 56 | *keystore2::globals::DB_PATH.lock().expect("Could not lock DB_PATH.") = |
| 57 | Path::new(&dir).to_path_buf(); |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 58 | } else { |
| 59 | panic!("Must specify a working directory."); |
| 60 | } |
| 61 | |
Janis Danisevskis | b1673db | 2021-02-08 18:11:57 -0800 | [diff] [blame] | 62 | let (confirmation_token_sender, confirmation_token_receiver) = channel(); |
| 63 | |
| 64 | ENFORCEMENTS.install_confirmation_token_receiver(confirmation_token_receiver); |
| 65 | |
Janis Danisevskis | 8c6378e | 2021-01-01 09:30:37 -0800 | [diff] [blame] | 66 | info!("Starting thread pool now."); |
| 67 | binder::ProcessState::start_thread_pool(); |
| 68 | |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 69 | let ks_service = KeystoreService::new_native_binder().unwrap_or_else(|e| { |
| 70 | panic!("Failed to create service {} because of {:?}.", KS2_SERVICE_NAME, e); |
| 71 | }); |
| 72 | binder::add_service(KS2_SERVICE_NAME, ks_service.as_binder()).unwrap_or_else(|e| { |
| 73 | panic!("Failed to register service {} because of {:?}.", KS2_SERVICE_NAME, e); |
| 74 | }); |
| 75 | |
Janis Danisevskis | b1673db | 2021-02-08 18:11:57 -0800 | [diff] [blame] | 76 | let apc_service = |
| 77 | ApcManager::new_native_binder(confirmation_token_sender).unwrap_or_else(|e| { |
| 78 | panic!("Failed to create service {} because of {:?}.", APC_SERVICE_NAME, e); |
| 79 | }); |
Janis Danisevskis | 7a1cf38 | 2020-11-20 11:22:14 -0800 | [diff] [blame] | 80 | binder::add_service(APC_SERVICE_NAME, apc_service.as_binder()).unwrap_or_else(|e| { |
| 81 | panic!("Failed to register service {} because of {:?}.", APC_SERVICE_NAME, e); |
| 82 | }); |
| 83 | |
Janis Danisevskis | 9f10a6a | 2021-01-18 16:45:21 +0000 | [diff] [blame] | 84 | let authorization_service = AuthorizationManager::new_native_binder().unwrap_or_else(|e| { |
| 85 | panic!("Failed to create service {} because of {:?}.", AUTHORIZATION_SERVICE_NAME, e); |
| 86 | }); |
| 87 | binder::add_service(AUTHORIZATION_SERVICE_NAME, authorization_service.as_binder()) |
| 88 | .unwrap_or_else(|e| { |
| 89 | panic!("Failed to register service {} because of {:?}.", AUTHORIZATION_SERVICE_NAME, e); |
| 90 | }); |
| 91 | |
Hasini Gunasinghe | da89555 | 2021-01-27 19:34:37 +0000 | [diff] [blame^] | 92 | let usermanager_service = UserManager::new_native_binder().unwrap_or_else(|e| { |
| 93 | panic!("Failed to create service {} because of {:?}.", USER_MANAGER_SERVICE_NAME, e); |
| 94 | }); |
| 95 | binder::add_service(USER_MANAGER_SERVICE_NAME, usermanager_service.as_binder()).unwrap_or_else( |
| 96 | |e| { |
| 97 | panic!("Failed to register service {} because of {:?}.", USER_MANAGER_SERVICE_NAME, e); |
| 98 | }, |
| 99 | ); |
| 100 | |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 101 | info!("Successfully registered Keystore 2.0 service."); |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 102 | |
Janis Danisevskis | e242b03 | 2020-11-17 15:57:51 -0800 | [diff] [blame] | 103 | info!("Joining thread pool now."); |
Janis Danisevskis | 1af9126 | 2020-08-10 14:58:08 -0700 | [diff] [blame] | 104 | binder::ProcessState::join_thread_pool(); |
| 105 | } |