From: Yun-Hao Chung <howardchung@xxxxxxxxxxxx> This series is to 1. Implement a few methods in core so that a plugin can have control of allowing / disallowing certain service connections. 2. Implement the AdminPolicy plugin. The plugin provides interfaces AdminPolicySet and AdminPolicyStatus. For each policy, users should set the value thorugh AdminPolicySet and query the current setting through AdminPolicyStatus. We separeted these two interfaces so that developers can assign different groups of users to these interfaces. Currently the only policy is ServiceAllowList, which make bluez only allow a list of service by specified their UUIDs, but the plugin is also expected to provide more controls over other bluez behaviors. Since the second part is a plugin, it might not be necessary to land in upstream tree. Thanks. Changes in v2: - Move bt_uuid_hash and bt_uuid_equal functions to adapter.c. - Modify the criteria to say a device is `Affected` from any-of-uuid to any-of-auto-connect-profile. - Remove the code to remove/reprobe disallowed/allowed profiles, instead, check if the service is allowed in bt_io_accept connect_cb. - Fix a typo in emit_property_change in plugin/admin_policy.c:set_service_allowlist - Instead of using device_state_cb, utilize D-BUS client to watch device added/removed. - Add a document in doc/ Yun-Hao Chung (11): core: add is_allowed property in btd_service core: add adapter and device allowed_uuid functions profiles: ignore incoming connection of not allowed service plugins: new plugin plugins/admin_policy: add admin_policy adapter driver plugins/admin_policy: add ServiceAllowList method plugins/admin_policy: add ServiceAllowList property plugins/admin_policy: listen for device add and remove plugins/admin_policy: add AffectedByPolicy property plugins/admin_policy: persist policy settings doc: add description of admin policy Makefile.plugins | 5 + Makefile.tools | 1 + bootstrap-configure | 1 + configure.ac | 4 + doc/admin-policy-api.txt | 65 ++++ plugins/admin_policy.c | 653 +++++++++++++++++++++++++++++++++++++++ profiles/audio/a2dp.c | 6 + profiles/audio/avctp.c | 7 + profiles/health/mcap.c | 10 +- profiles/input/server.c | 10 + src/adapter.c | 90 ++++++ src/adapter.h | 8 + src/device.c | 64 +++- src/device.h | 2 + src/profile.c | 12 + src/service.c | 33 ++ src/service.h | 2 + 17 files changed, 971 insertions(+), 2 deletions(-) create mode 100644 doc/admin-policy-api.txt create mode 100644 plugins/admin_policy.c -- 2.32.0.402.g57bb445576-goog
