Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d218a202 authored by Soi, Yoshinari's avatar Soi, Yoshinari Committed by Steve Kondik
Browse files

When the device boots up, netd works more than required 

When the device boots up, netd adds rules for applications
which do not have the NETWORK permission to iptables.
Therefore, optimize NetworkPolicyManagerService to not touch
uids that do not have the NETWORK permission.
This modification is similar to Google commit 88e98dfa.

Change-Id: Ic8bb837143b9e349859210654248195d62b73d17
parent 93e2a44e

services/core/java/com/android/server/net/NetworkPolicyManagerService.java

+11 −0
Original line number Diff line number Diff line
@@ -2137,12 +2137,23 @@ public class NetworkPolicyManagerService extends INetworkPolicyManager.Stub { 
        uidRules.clear();



        // Fully update the app idle firewall chain.

        final IPackageManager ipm = AppGlobals.getPackageManager();

        final List<UserInfo> users = mUserManager.getUsers();

        for (int ui = users.size() - 1; ui >= 0; ui--) {

            UserInfo user = users.get(ui);

            int[] idleUids = mUsageStats.getIdleUidsForUser(user.id);

            for (int uid : idleUids) {

                if (!mPowerSaveTempWhitelistAppIds.get(UserHandle.getAppId(uid), false)) {

                    // quick check: if this uid doesn't have INTERNET permission, it

                    // doesn't have network access anyway, so it is a waste to mess

                    // with it here.

                    try {

                        if (ipm.checkUidPermission(Manifest.permission.INTERNET, uid)

                                != PackageManager.PERMISSION_GRANTED) {

                            continue;

                        }

                    } catch (RemoteException e) {

                    }

                    uidRules.put(uid, FIREWALL_RULE_DENY);

                }

            }