Method check_credentials

implementation/security/src/policy_manager_impl.cpp:63–126

}

bool policy_manager_impl::check_credentials(client_t _client, const vsomeip_sec_client_t* _sec_client) {

#ifdef VSOMEIP_DISABLE_SECURITY
    (void)_client;
    (void)_sec_client;

    return true;
#else
    if (!policy_enabled_)
        return true;

    if (!_sec_client)
        return true;

    if (_sec_client->port != VSOMEIP_SEC_PORT_UNUSED)
        return true;

    uid_t its_uid(_sec_client->user);
    gid_t its_gid(_sec_client->group);

    bool has_id(false);

    std::shared_lock its_lock(any_client_policies_mutex_);
    for (const auto& p : any_client_policies_) {

        std::scoped_lock its_policy_lock(p->mutex_);

        bool has_uid, has_gid(false);

        const auto found_uid = p->credentials_.find(its_uid);
        has_uid = (found_uid != p->credentials_.end());
        if (has_uid) {
            const auto found_gid = found_uid->second.find(its_gid);
            has_gid = (found_gid != found_uid->second.end());
        }

        has_id = (has_uid && has_gid);

        if ((has_id && p->allow_who_) || (!has_id && !p->allow_who_)) {
            // Code is unaccessible due to logic checks.
            if (!store_client_to_sec_client_mapping(_client, _sec_client)) {
                std::string security_mode_text = "!";
                if (!check_credentials_) {
                    security_mode_text = " but will be allowed due to audit mode is active!";
                }
                VSOMEIP_INFO << "vSomeIP Security: Client 0x" << hex4(_client) << " with UID/GID=" << its_uid << "/" << its_gid
                             << " : Check credentials failed as existing credentials would be overwritten" << security_mode_text;
                return !check_credentials_;
            }
            store_sec_client_to_client_mapping(_sec_client, _client);
            return true;
        }
    }

    std::string security_mode_text = " ~> Skip!";
    if (!check_credentials_) {
        security_mode_text = " but will be allowed due to audit mode is active!";
    }