0ac2c0945b
Allow VPN apps to lookup the UID owner of a network connection.
Requires specifying the:
- IP address and port for both the source and destination of a TCP
connection.
- IP address and port for either source and destination or just
source for a UDP connection.
Only TCP and UDP protocols are supported. Only connections for UIDs
that apply to the calling VPN app will be resolved. This is intended
to replace direct app access to /proc/net/{tcp,tcp6,udp,udp6}.
The implementation uses netlink inet_diag sockets[1] to perform
the lookup on TCP sockets as well as UDP sockets when supported
(kernel has CONFIG_INET_UDP_DIAG=y).
[1] http://man7.org/linux/man-pages/man7/sock_diag.7.html
Bug: 9496886
Bug: 109758967
Test: atest HostsideVpnTests
Test: atest InetDiagSocketTest on Taimen with CONFIG_INET_UDP_DIAG
and on Sailfish without CONFIG_INET_UDP_DIAG.
Change-Id: I2bbc7072dd091e2e653dadf6dc05024c04180f34
68 lines
2.0 KiB
Java
68 lines
2.0 KiB
Java
/*
|
|
* Copyright (C) 2018 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
package android.net.netlink;
|
|
|
|
import static java.nio.ByteOrder.BIG_ENDIAN;
|
|
import static android.system.OsConstants.AF_INET;
|
|
import static android.system.OsConstants.AF_INET6;
|
|
|
|
import java.net.Inet4Address;
|
|
import java.net.InetSocketAddress;
|
|
import java.nio.ByteBuffer;
|
|
import java.nio.ByteOrder;
|
|
import android.util.Log;
|
|
|
|
/**
|
|
* struct inet_diag_msg
|
|
*
|
|
* see <linux_src>/include/uapi/linux/inet_diag.h
|
|
*
|
|
* struct inet_diag_msg {
|
|
* __u8 idiag_family;
|
|
* __u8 idiag_state;
|
|
* __u8 idiag_timer;
|
|
* __u8 idiag_retrans;
|
|
* struct inet_diag_sockid id;
|
|
* __u32 idiag_expires;
|
|
* __u32 idiag_rqueue;
|
|
* __u32 idiag_wqueue;
|
|
* __u32 idiag_uid;
|
|
* __u32 idiag_inode;
|
|
* };
|
|
*
|
|
* @hide
|
|
*/
|
|
public class StructInetDiagMsg {
|
|
public static final int STRUCT_SIZE = 4 + StructInetDiagSockId.STRUCT_SIZE + 20;
|
|
private static final int IDIAG_UID_OFFSET = StructNlMsgHdr.STRUCT_SIZE + 4 +
|
|
StructInetDiagSockId.STRUCT_SIZE + 12;
|
|
public int idiag_uid;
|
|
|
|
public static StructInetDiagMsg parse(ByteBuffer byteBuffer) {
|
|
StructInetDiagMsg struct = new StructInetDiagMsg();
|
|
struct.idiag_uid = byteBuffer.getInt(IDIAG_UID_OFFSET);
|
|
return struct;
|
|
}
|
|
|
|
@Override
|
|
public String toString() {
|
|
return "StructInetDiagMsg{ "
|
|
+ "idiag_uid{" + idiag_uid + "}, "
|
|
+ "}";
|
|
}
|
|
}
|