Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 4c00a067 authored by Suprabh Shukla's avatar Suprabh Shukla Committed by Android Build Cherrypicker Worker
Browse files

Do not apply background rules for core uids

Core uids are exempt from firewalls by the underlying stack, so they
will always be allowed network.
Similarly, apps without the INTERNET permission cannot access network
regardless of firewall rules.

Currently, the code is fragmented in applying rules to these uids.
To make debugging and code maintenance easier, we want to be consistent
by never setting any rules for such uids.

Once the feature is enabled and tested, upstream code paths for all
firewall rules can be simplified to use the same check.

Flag: com.android.server.net.never_apply_rules_to_core_uids

Test: atest FrameworksServicesTests:NetworkPolicyManagerServiceTest

BYPASS_INCLUSIVE_LANGUAGE_REASON=Existing methods

Bug: 356956588
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:da8a8cb6ea581986e7f0ba2c8c3462b2d66492fc)
Merged-In: Ibe50b806a0632d09772e7e2e8deea6d2fefdc946
Change-Id: Ibe50b806a0632d09772e7e2e8deea6d2fefdc946
parent e74cf64e
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment