blob: e55c32157350e727779308ffed196c33d5b5ef26 [file] [log] [blame]
// Copyright 2015 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <memory>
#include <string>
#include <utility>
#include <vector>
#include <base/macros.h>
#include <base/time/time.h>
#include "permission_broker/rule.h"
#include "permission_broker/udev_scopers.h"
struct udev;
namespace permission_broker {
class UdevRule;
class RuleEngine {
RuleEngine(const std::string& udev_run_path,
const base::TimeDelta& poll_interval);
virtual ~RuleEngine();
// Adds |rule| to the end of the existing rule chain. Takes ownership of
// |rule|.
void AddRule(Rule* rule);
// Invokes each of the rules in order on |path| until either a rule explicitly
// denies access to the path or until there are no more rules left. If, after
// executing all of the stored rules, no rule has explicitly allowed access to
// the path then access is denied. If _any_ rule denies access to |path| then
// processing the rules is aborted early and access is denied.
Rule::Result ProcessPath(const std::string& path);
// This constructor is for use by test code only.
RuleEngine(const RuleEngine&) = delete;
RuleEngine& operator=(const RuleEngine&) = delete;
friend class RuleEngineTest;
// Waits for all queued udev events to complete before returning. Is
// equivalent to invoking 'udevadm settle', but without the external
// dependency and overhead.
virtual void WaitForEmptyUdevQueue();
// Finds the udev_device where udev_device_get_devnode returns |path|.
ScopedUdevDevicePtr FindUdevDevice(const std::string& path);
ScopedUdevPtr udev_;
std::vector<std::unique_ptr<Rule>> rules_;
base::TimeDelta poll_interval_;
std::string udev_run_path_;
} // namespace permission_broker