tree d2b1aae8a522654c39697470a9e8215b1b00a635
parent 3507a65f2f9d41652d8d2fcc97c1c6ccc229a547
author Patrick Rohr <prohr@google.com> 1603453860 +0200
committer Patrick Rohr <prohr@google.com> 1609174894 +0100

Add Restricted Mode handling to NetworkPolicyManager

Adds Restricted Mode functionality to NetworkPolicyManager. When this
mode is turned on (via setting), only apps with
android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS will be able to
use the network. For all other apps, the network will be blocked by the
firewall. This is controlled by a new allowlist firewall chain
fw_restricted_mode.

As a first step, this implementation still requires a reboot after the
enabling / disabling the mode to take effect. I will provide the dynamic
configuration in the next CL.

Test: atest CtsHostsideNetworkTests && atest
NetworkPolicyManagerServiceTest
Bug: 170322816
Bug: 157505406
Bug: 170322455
Bug: 175281879

Change-Id: I0731fa842c69683953baaf9ec3a9a03454f4c607