OSDN Git Service

Server API to only allow networking by VPN apps
authorRobin Lee <rgl@google.com>
Wed, 30 Mar 2016 17:43:08 +0000 (18:43 +0100)
committerRobin Lee <rgl@google.com>
Tue, 19 Apr 2016 09:09:31 +0000 (10:09 +0100)
commitb8087363143050d214d48e5620a330776ca95a69
tree72dd7eb2cc094cc7b92796ef37e1682ab108da37
parent4ef94642636182e68495f606a65c00f8a830aad4
Server API to only allow networking by VPN apps

Secure virtual networks already create rules to route all traffic into
theirselves. This depends on the secure network already existing.

API creates an ip rule at a priority level below SECURE_VPN which
can catch traffic before VPN comes up, if it is a requirement that no
traffic ever leaves without first going through VPN.

Bug: 26694104
Bug: 26354134
Change-Id: If23df0760c6eb0ad137fc26c5124e48edf23b722
server/NetdNativeService.cpp
server/NetdNativeService.h
server/RouteController.cpp
server/RouteController.h
server/UidRanges.cpp
server/UidRanges.h
server/binder/android/net/INetd.aidl
tests/binder_test.cpp