Skip to content

GitLab

Switch branch/tag
History Find file
Clone
Blacklist uids for network access
Amith Yamasani authored 
FirewallController can now be in blacklist mode (aka disabled)
or whitelist mode (aka enabled).

Some of the methods don't do anything when in blacklist mode.

Uid rules updated to allow dropping packets to uids that
shouldn't get any network access, usually for idle apps.

Added a wait option to iptables calls to make sure it doesn't
fail if there's contention. Fixes a flakiness I was seeing in
removing rules.

Bug: 20066058
Change-Id: I815bcb45aa06d04020e902df8c67bb3894e98f40
390e4ea8
Name Last commit Last update
..
Android.mk
BandwidthController.cpp
BandwidthController.h
ClatdController.cpp
ClatdController.h
CleanSpec.mk
CommandListener.cpp
CommandListener.h
ConnmarkFlags.h
DnsProxyListener.cpp
DnsProxyListener.h
DummyNetwork.cpp
DummyNetwork.h
FirewallController.cpp
FirewallController.h
FwmarkServer.cpp
FwmarkServer.h
IdletimerController.cpp
IdletimerController.h
InterfaceController.cpp
InterfaceController.h
List.h
LocalNetwork.cpp
LocalNetwork.h
MDnsSdListener.cpp
MDnsSdListener.h
NatController.cpp
NatController.h
NetdCommand.cpp
NetdCommand.h
NetdConstants.cpp
NetdConstants.h
NetlinkHandler.cpp
NetlinkHandler.h
NetlinkManager.cpp
NetlinkManager.h
Network.cpp
Network.h
NetworkController.cpp
NetworkController.h
PhysicalNetwork.cpp
PhysicalNetwork.h
PppController.cpp
PppController.h
ResolverController.cpp
ResolverController.h
ResponseCode.h
RouteController.cpp
RouteController.h
SoftapController.cpp
SoftapController.h
StrictController.cpp
StrictController.h
TetherController.cpp
TetherController.h
UidRanges.cpp
UidRanges.h
VirtualNetwork.cpp
VirtualNetwork.h
main.cpp
ndc.c
oem_iptables_hook.cpp
oem_iptables_hook.h