1 /*
2  * Copyright (C) 2014 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #ifndef _STRICT_CONTROLLER_H
18 #define _STRICT_CONTROLLER_H
19 
20 #include <string>
21 
22 #include "NetdConstants.h"
23 
24 enum StrictPenalty { INVALID, ACCEPT, LOG, REJECT };
25 
26 /*
27  * Help apps catch unwanted low-level networking behavior, like
28  * connections not wrapped in TLS.
29  */
30 class StrictController {
31 public:
32     StrictController();
33 
34     int setupIptablesHooks(void);
35     int resetChains(void);
36 
37     int setUidCleartextPenalty(uid_t, StrictPenalty);
38 
39     static const char* LOCAL_OUTPUT;
40     static const char* LOCAL_CLEAR_DETECT;
41     static const char* LOCAL_CLEAR_CAUGHT;
42     static const char* LOCAL_PENALTY_LOG;
43     static const char* LOCAL_PENALTY_REJECT;
44     std::mutex lock;
45 
46   protected:
47     // For testing.
48     friend class StrictControllerTest;
49     static int (*execIptablesRestore)(IptablesTarget target, const std::string& commands);
50 };
51 
52 #endif
53