| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef REMOTING_HOST_POLICY_HACK_POLICY_WATCHER_H_ | 5 #ifndef REMOTING_HOST_POLICY_HACK_POLICY_WATCHER_H_ |
| 6 #define REMOTING_HOST_POLICY_HACK_POLICY_WATCHER_H_ | 6 #define REMOTING_HOST_POLICY_HACK_POLICY_WATCHER_H_ |
| 7 | 7 |
| 8 #include "base/callback.h" | 8 #include "base/callback.h" |
| 9 #include "base/memory/weak_ptr.h" | 9 #include "base/memory/weak_ptr.h" |
| 10 #include "base/values.h" | 10 #include "base/values.h" |
| 11 #include "components/policy/core/common/policy_service.h" | 11 #include "components/policy/core/common/policy_service.h" |
| 12 | 12 |
| 13 namespace base { | 13 namespace base { |
| 14 class SingleThreadTaskRunner; | 14 class SingleThreadTaskRunner; |
| 15 class TimeDelta; | 15 class TimeDelta; |
| 16 class WaitableEvent; | 16 class WaitableEvent; |
| 17 } // namespace base | 17 } // namespace base |
| 18 | 18 |
| 19 namespace remoting { | 19 namespace remoting { |
| 20 namespace policy_hack { | 20 namespace policy_hack { |
| 21 | 21 |
| 22 // Watches for changes to the managed remote access host policies. | 22 // Watches for changes to the managed remote access host policies. |
| 23 // If StartWatching() has been called, then before this object can be deleted, | 23 // If StartWatching() has been called, then before this object can be deleted, |
| 24 // StopWatching() have completed (the provided |done| event must be signaled). | 24 // StopWatching() have completed (the provided |done| event must be signaled). |
| 25 class PolicyWatcher { | 25 class PolicyWatcher { |
| 26 public: | 26 public: |
| 27 // Called first with all policies, and subsequently with any changed policies. | 27 // Called first with all policies, and subsequently with any changed policies. |
| 28 typedef base::Callback<void(scoped_ptr<base::DictionaryValue>)> | 28 typedef base::Callback<void(scoped_ptr<base::DictionaryValue>)> |
| 29 PolicyUpdatedCallback; | 29 PolicyCallback; |
| 30 | |
| 31 // Called after detecting malformed policies. | |
| 32 typedef base::Callback<void()> PolicyErrorCallback; | |
| 33 | 30 |
| 34 explicit PolicyWatcher( | 31 explicit PolicyWatcher( |
| 35 scoped_refptr<base::SingleThreadTaskRunner> task_runner); | 32 scoped_refptr<base::SingleThreadTaskRunner> task_runner); |
| 36 virtual ~PolicyWatcher(); | 33 virtual ~PolicyWatcher(); |
| 37 | 34 |
| 38 // This guarantees that the |policy_updated_callback| is called at least once | 35 // This guarantees that the |policy_callback| is called at least once with |
| 39 // with the current policies. After that, |policy_updated_callback| will be | 36 // the current policies. After that, |policy_callback| will be called |
| 40 // called whenever a change to any policy is detected. It will then be called | 37 // whenever a change to any policy is detected. It will then be called only |
| 41 // only with the changed policies. | 38 // with the changed policies. |
| 42 // | 39 virtual void StartWatching(const PolicyCallback& policy_callback); |
| 43 // |policy_error_callback| will be called when malformed policies are detected | |
| 44 // (i.e. wrong type of policy value, or unparseable files under | |
| 45 // /etc/opt/chrome/policies/managed). | |
| 46 // When called, the |policy_error_callback| is responsible for mitigating the | |
| 47 // security risk of running with incorrectly formulated policies (by either | |
| 48 // shutting down or locking down the host). | |
| 49 // After calling |policy_error_callback| PolicyWatcher will continue watching | |
| 50 // for policy changes and will call |policy_updated_callback| when the error | |
| 51 // is recovered from and may call |policy_error_callback| when new errors are | |
| 52 // found. | |
| 53 virtual void StartWatching( | |
| 54 const PolicyUpdatedCallback& policy_updated_callback, | |
| 55 const PolicyErrorCallback& policy_error_callback); | |
| 56 | 40 |
| 57 // Should be called after StartWatching() before the object is deleted. Calls | 41 // Should be called after StartWatching() before the object is deleted. Calls |
| 58 // should wait for |stopped_callback| to be called before deleting it. | 42 // should wait for |stopped_callback| to be called before deleting it. |
| 59 virtual void StopWatching(const base::Closure& stopped_callback); | 43 virtual void StopWatching(const base::Closure& stopped_callback); |
| 60 | 44 |
| 61 // Implemented by each platform. |task_runner| should be an IO message loop. | 45 // Implemented by each platform. |task_runner| should be an IO message loop. |
| 62 // |policy_service| is currently only used on ChromeOS. The caller must | 46 // |policy_service| is currently only used on ChromeOS. The caller must |
| 63 // ensure that |policy_service| remains valid for the lifetime of | 47 // ensure that |policy_service| remains valid for the lifetime of |
| 64 // PolicyWatcher. | 48 // PolicyWatcher. |
| 65 static scoped_ptr<PolicyWatcher> Create( | 49 static scoped_ptr<PolicyWatcher> Create( |
| (...skipping 45 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 111 virtual void StopWatchingInternal() = 0; | 95 virtual void StopWatchingInternal() = 0; |
| 112 virtual void Reload() = 0; | 96 virtual void Reload() = 0; |
| 113 | 97 |
| 114 // Used to check if the class is on the right thread. | 98 // Used to check if the class is on the right thread. |
| 115 bool OnPolicyWatcherThread() const; | 99 bool OnPolicyWatcherThread() const; |
| 116 | 100 |
| 117 // Takes the policy dictionary from the OS specific store and extracts the | 101 // Takes the policy dictionary from the OS specific store and extracts the |
| 118 // relevant policies. | 102 // relevant policies. |
| 119 void UpdatePolicies(const base::DictionaryValue* new_policy); | 103 void UpdatePolicies(const base::DictionaryValue* new_policy); |
| 120 | 104 |
| 121 // Signals policy error to the registered |PolicyErrorCallback|. | |
| 122 void SignalPolicyError(); | |
| 123 | |
| 124 // Called whenever a transient error occurs during reading of policy files. | |
| 125 // This will increment a counter, and will trigger a call to | |
| 126 // SignalPolicyError() only after a threshold count is reached. | |
| 127 // The counter is reset whenever policy has been successfully read. | |
| 128 void SignalTransientPolicyError(); | |
| 129 | |
| 130 // Used for time-based reloads in case something goes wrong with the | 105 // Used for time-based reloads in case something goes wrong with the |
| 131 // notification system. | 106 // notification system. |
| 132 void ScheduleFallbackReloadTask(); | 107 void ScheduleFallbackReloadTask(); |
| 133 void ScheduleReloadTask(const base::TimeDelta& delay); | 108 void ScheduleReloadTask(const base::TimeDelta& delay); |
| 134 | 109 |
| 135 // Returns a DictionaryValue containing the default values for each policy. | 110 // Returns a DictionaryValue containing the default values for each policy. |
| 136 const base::DictionaryValue& Defaults() const; | 111 const base::DictionaryValue& Defaults() const; |
| 137 | 112 |
| 138 private: | 113 private: |
| 139 void StopWatchingOnPolicyWatcherThread(); | 114 void StopWatchingOnPolicyWatcherThread(); |
| 140 scoped_refptr<base::SingleThreadTaskRunner> task_runner_; | 115 scoped_refptr<base::SingleThreadTaskRunner> task_runner_; |
| 141 | 116 |
| 142 PolicyUpdatedCallback policy_updated_callback_; | 117 PolicyCallback policy_callback_; |
| 143 PolicyErrorCallback policy_error_callback_; | |
| 144 int transient_policy_error_retry_counter_; | |
| 145 | 118 |
| 146 scoped_ptr<base::DictionaryValue> old_policies_; | 119 scoped_ptr<base::DictionaryValue> old_policies_; |
| 147 scoped_ptr<base::DictionaryValue> default_values_; | 120 scoped_ptr<base::DictionaryValue> default_values_; |
| 148 scoped_ptr<base::DictionaryValue> bad_type_values_; | 121 scoped_ptr<base::DictionaryValue> bad_type_values_; |
| 149 | 122 |
| 150 // Allows us to cancel any inflight FileWatcher events or scheduled reloads. | 123 // Allows us to cancel any inflight FileWatcher events or scheduled reloads. |
| 151 base::WeakPtrFactory<PolicyWatcher> weak_factory_; | 124 base::WeakPtrFactory<PolicyWatcher> weak_factory_; |
| 152 }; | 125 }; |
| 153 | 126 |
| 154 } // namespace policy_hack | 127 } // namespace policy_hack |
| 155 } // namespace remoting | 128 } // namespace remoting |
| 156 | 129 |
| 157 #endif // REMOTING_HOST_POLICY_HACK_POLICY_WATCHER_H_ | 130 #endif // REMOTING_HOST_POLICY_HACK_POLICY_WATCHER_H_ |
| OLD | NEW |