tree 45a91f4f92fbf0ff4ff50a39af8506501b0b90e4
parent 4dca18aa3131a04684f194532ff3e02858f1d75e
author junyulai <junyulai@google.com> 1556606525 +0800
committer junyulai <junyulai@google.com> 1557419818 +0800

Limit unprivileged keepalives per uid

Public APIs for creating unprivileged NATT socket keepalive
might allow users to exhaust resource if malicious apps try
to create keepalives with fd which is not created by
IpSecService through binder call. Thus, this change add
customizable limitation per uid to prevent resource exhaustion
attack.

Bug: 129371366
Bug: 132307230
Test: atest FrameworksNetTests
Change-Id: Ibcb91105e46f7e898b8aa7c2babc3344ef2c6257