|
2 | 2 |
|
3 | 3 | JSON_FILE="/data/adb/net-switch/isolated.json" |
4 | 4 |
|
| 5 | +cli_usage() { |
| 6 | + echo "Usage: netswitch {block|unblock|list} [package-name...]" |
| 7 | + echo "Commands:" |
| 8 | + echo " block <package-name> [package-name...] Block internet access for specified packages" |
| 9 | + echo " unblock <package-name|all> [package-name...] Unblock internet access for specified packages" |
| 10 | + echo " list Show currently blocked packages" |
| 11 | +} |
| 12 | + |
5 | 13 | get_uid() { |
6 | | - package="$1" |
7 | | - uid="$(pm list packages -U | grep "^package:$package " | sed 's/.*uid:\([0-9]*\).*/\1/' | cut -d',' -f1)" |
8 | | - if [ -n "$uid" ]; then |
9 | | - echo "$uid" |
10 | | - return 0 |
11 | | - fi |
12 | | - return 1 |
| 14 | + package="$1" |
| 15 | + uid="$(pm list packages -U | grep "^package:$package " | sed 's/.*uid:\([0-9]*\).*/\1/' | cut -d',' -f1)" |
| 16 | + [ ! -n "$uid" ] && return 1 |
| 17 | + echo "$uid" |
| 18 | + return 0 |
13 | 19 | } |
14 | 20 |
|
15 | 21 | read_json() { |
16 | | - if [ -f "$JSON_FILE" ]; then |
17 | | - cat "$JSON_FILE" | tr -d '[]" ' | tr ',' ' ' |
18 | | - fi |
| 22 | + if [ -f "$JSON_FILE" ]; then |
| 23 | + cat "$JSON_FILE" | tr -d '[]" ' | tr ',' ' ' |
| 24 | + fi |
19 | 25 | } |
20 | 26 |
|
21 | 27 | write_json() { |
22 | | - if [ $# -eq 0 ]; then |
23 | | - echo "[]" > "$JSON_FILE" |
24 | | - else |
25 | | - (printf "["; first=1; for pkg in "$@"; do |
26 | | - if [ $first -eq 1 ]; then |
27 | | - printf "\"%s\"" "$pkg" |
28 | | - first=0 |
29 | | - else |
30 | | - printf ",\"%s\"" "$pkg" |
31 | | - fi |
32 | | - done; printf "]") > "$JSON_FILE" |
33 | | - fi |
| 28 | + if [ $# -eq 0 ]; then |
| 29 | + echo "[]" >"$JSON_FILE" |
| 30 | + return 0 |
| 31 | + fi |
| 32 | + |
| 33 | + ( |
| 34 | + printf "[" |
| 35 | + first=1 |
| 36 | + for pkg in "$@"; do |
| 37 | + if [ $first -eq 1 ]; then |
| 38 | + printf "\"%s\"" "$pkg" |
| 39 | + first=0 |
| 40 | + else |
| 41 | + printf ",\"%s\"" "$pkg" |
| 42 | + fi |
| 43 | + done |
| 44 | + printf "]" |
| 45 | + ) >"$JSON_FILE" |
34 | 46 | } |
35 | 47 |
|
36 | 48 | block_package() { |
37 | | - package="$1" |
38 | | - uid="$(get_uid "$package")" |
39 | | - if [ $? -ne 0 ] || [ -z "$uid" ]; then |
40 | | - echo "Error: Package '$package' not found" |
41 | | - return 1 |
42 | | - fi |
43 | | - iptables -I OUTPUT -m owner --uid-owner "$uid" -j REJECT |
44 | | - ip6tables -I OUTPUT -m owner --uid-owner "$uid" -j REJECT |
45 | | - current_packages="$(read_json)" |
46 | | - for p in $current_packages; do |
47 | | - if [ "$p" = "$package" ]; then |
48 | | - echo "Package $package is already blocked" |
49 | | - return 0 |
50 | | - fi |
51 | | - done |
52 | | - write_json $current_packages $package |
53 | | - echo "Blocked internet access for $package (UID: $uid)" |
| 49 | + package="$1" |
| 50 | + uid="$(get_uid "$package")" |
| 51 | + if [ $? -ne 0 ] || [ -z "$uid" ]; then |
| 52 | + echo "Error: Package '$package' not found" |
| 53 | + return 1 |
| 54 | + fi |
| 55 | + |
| 56 | + iptables -I OUTPUT -m owner --uid-owner "$uid" -j REJECT |
| 57 | + ip6tables -I OUTPUT -m owner --uid-owner "$uid" -j REJECT |
| 58 | + |
| 59 | + current_packages="$(read_json)" |
| 60 | + for app in $current_packages; do |
| 61 | + if [ "$app" = "$package" ]; then |
| 62 | + echo "Package $package is already blocked" |
| 63 | + return 0 |
| 64 | + fi |
| 65 | + done |
| 66 | + |
| 67 | + write_json $current_packages $package |
| 68 | + echo "Blocked internet access for $package (UID: $uid)" |
54 | 69 | } |
55 | 70 |
|
56 | 71 | unblock_package() { |
57 | | - package="$1" |
58 | | - uid="$(get_uid "$package")" |
59 | | - if [ $? -ne 0 ] || [ -z "$uid" ]; then |
60 | | - echo "Error: Package '$package' not found" |
61 | | - return 1 |
62 | | - fi |
63 | | - iptables -D OUTPUT -m owner --uid-owner "$uid" -j REJECT 2>/dev/null |
64 | | - ip6tables -D OUTPUT -m owner --uid-owner "$uid" -j REJECT 2>/dev/null |
65 | | - current_packages="$(read_json)" |
66 | | - new_packages="" |
67 | | - for p in $current_packages; do |
68 | | - if [ "$p" != "$package" ]; then |
69 | | - new_packages="$new_packages $p" |
70 | | - fi |
71 | | - done |
72 | | - write_json $new_packages |
73 | | - echo "Unblocked internet access for $package (UID: $uid)" |
| 72 | + package="$1" |
| 73 | + uid="$(get_uid "$package")" |
| 74 | + if [ $? -ne 0 ] || [ -z "$uid" ]; then |
| 75 | + echo "Error: Package '$package' not found" |
| 76 | + return 1 |
| 77 | + fi |
| 78 | + |
| 79 | + iptables -D OUTPUT -m owner --uid-owner "$uid" -j REJECT 2>/dev/null |
| 80 | + ip6tables -D OUTPUT -m owner --uid-owner "$uid" -j REJECT 2>/dev/null |
| 81 | + |
| 82 | + current_packages="$(read_json)" |
| 83 | + new_packages="" |
| 84 | + for app in $current_packages; do |
| 85 | + [ "$app" != "$package" ] && new_packages="$new_packages $app" |
| 86 | + done |
| 87 | + |
| 88 | + write_json $new_packages |
| 89 | + echo "Unblocked internet access for $package (UID: $uid)" |
74 | 90 | } |
75 | 91 |
|
76 | 92 | unblock_all() { |
77 | | - for package in $(read_json); do |
78 | | - unblock_package "$package" |
79 | | - done |
80 | | - write_json |
81 | | - echo "Unblocked all packages" |
| 93 | + for package in $(read_json); do |
| 94 | + unblock_package "$package" |
| 95 | + done |
| 96 | + write_json |
| 97 | + echo "Unblocked all packages" |
82 | 98 | } |
83 | 99 |
|
84 | 100 | list_blocked() { |
85 | | - packages="$(read_json)" |
86 | | - if [ -z "$packages" ]; then |
87 | | - echo "No packages are currently blocked" |
88 | | - else |
89 | | - echo "Currently blocked packages:" |
90 | | - for package in $packages; do |
91 | | - uid="$(get_uid "$package")" |
92 | | - if [ $? -eq 0 ] && [ -n "$uid" ]; then |
93 | | - echo "- $package (UID: $uid)" |
94 | | - else |
95 | | - echo "- $package (package no longer exists)" |
96 | | - fi |
97 | | - done |
98 | | - fi |
| 101 | + packages="$(read_json)" |
| 102 | + if [ -z "$packages" ]; then |
| 103 | + echo "No packages are currently blocked" |
| 104 | + exit 0 |
| 105 | + fi |
| 106 | + |
| 107 | + echo "Currently blocked packages:" |
| 108 | + for package in $packages; do |
| 109 | + uid="$(get_uid "$package")" |
| 110 | + if [ $? -eq 0 ] && [ -n "$uid" ]; then |
| 111 | + echo "- $package (UID: $uid)" |
| 112 | + else |
| 113 | + echo "- $package (package no longer exists)" |
| 114 | + fi |
| 115 | + done |
| 116 | +} |
| 117 | + |
| 118 | +handle_block() { |
| 119 | + if [ $# -eq 0 ]; then |
| 120 | + echo -e "Error: Bad arguments\nTry 'netswitch help' for more information." |
| 121 | + exit 1 |
| 122 | + fi |
| 123 | + |
| 124 | + for package in "$@"; do |
| 125 | + block_package "$package" |
| 126 | + done |
| 127 | +} |
| 128 | + |
| 129 | +handle_unblock() { |
| 130 | + if [ $# -eq 0 ]; then |
| 131 | + echo -e "Error: Bad arguments\nTry 'netswitch help' for more information." |
| 132 | + exit 1 |
| 133 | + fi |
| 134 | + |
| 135 | + if [ "$1" = "all" ]; then |
| 136 | + unblock_all |
| 137 | + exit 0 |
| 138 | + fi |
| 139 | + |
| 140 | + for package in "$@"; do |
| 141 | + unblock_package "$package" |
| 142 | + done |
99 | 143 | } |
100 | 144 |
|
101 | 145 | case "$1" in |
102 | | - "block") |
103 | | - shift |
104 | | - if [ $# -eq 0 ]; then |
105 | | - echo "Usage: netswitch block <package-name> [package-name...]" |
106 | | - exit 1 |
107 | | - fi |
108 | | - for package in "$@"; do |
109 | | - block_package "$package" |
110 | | - done |
111 | | - ;; |
112 | | - "unblock") |
113 | | - shift |
114 | | - if [ $# -eq 0 ]; then |
115 | | - echo "Usage: netswitch unblock <package-name|all> [package-name...]" |
116 | | - exit 1 |
117 | | - fi |
118 | | - if [ "$1" = "all" ]; then |
119 | | - unblock_all |
120 | | - else |
121 | | - for package in "$@"; do |
122 | | - unblock_package "$package" |
123 | | - done |
124 | | - fi |
125 | | - ;; |
126 | | - "list") |
127 | | - list_blocked |
128 | | - ;; |
129 | | - *) |
130 | | - echo "Usage: netswitch {block|unblock|list} [package-name...]" |
131 | | - echo "Commands:" |
132 | | - echo " block <package-name> [package-name...] Block internet access for specified packages" |
133 | | - echo " unblock <package-name|all> [package-name...] Unblock internet access for specified packages" |
134 | | - echo " list Show currently blocked packages" |
135 | | - exit 1 |
136 | | - ;; |
| 146 | +"block") shift && handle_block $@ ;; |
| 147 | +"unblock") shift && handle_unblock $@ ;; |
| 148 | +"list") list_blocked ;; |
| 149 | +"help") cli_usage ;; |
| 150 | +*) cli_usage && exit 1 ;; |
137 | 151 | esac |
0 commit comments