OSDN Git Service

Limit unprivileged keepalives per uid
authorjunyulai <junyulai@google.com>
Tue, 30 Apr 2019 06:42:05 +0000 (14:42 +0800)
committerChalard Jean <jchalard@google.com>
Mon, 13 May 2019 06:53:02 +0000 (15:53 +0900)
commit3c5fe888675b4f60b76cd058a3296112c8037b63
treef996e68793e5ce26ebe331a412c9c5361c7ed9c8
parent2ee367ece93f64acb2b74e6daa6ef6187d87da14
Limit unprivileged keepalives per uid

Public APIs for creating unprivileged NATT socket keepalive
might allow users to exhaust resource if malicious apps try
to create keepalives with fd which is not created by
IpSecService through binder call. Thus, this change add
customizable limitation per uid to prevent resource exhaustion
attack.

Bug: 129371366
Bug: 132307230
Test: atest FrameworksNetTests

Clean cherry-pick of aosp/954040
Merged-In: Ibcb91105e46f7e898b8aa7c2babc3344ef2c6257
Merged-In: Ia667386c1a8949839871a6949d79552d9c8b88f0

Change-Id: I92f6d977b6dfde4e1bf74df6b60c9a0b9e8eec40
core/res/res/values/config.xml
core/res/res/values/symbols.xml
services/core/java/com/android/server/connectivity/KeepaliveTracker.java