Adjust IP rules to accommodate UID-based firewall
* No default implicit network rule. We have UID-based implicit rules.
* Can only use VPN fallthrough with system permission. It is not
UID-based, and other rules fulfill our needs.
* Binding to output interfaces arbitrarily requires system permission.
Other rules cover this where it should be allowed for UIDs.
* Require system permission for RULE_PRIORITY_DEFAULT_NETWORK rule.
Default network access is already allowed for UIDs permitted on the
network via RULE_PRIORITY_UID_DEFAULT_NETWORK rules.
Change-Id: Icd64aa530e8d202abb97d8325160a5d4c0b4c490
Signed-off-by: Mohammad Hasan Keramat J <ikeramat@protonmail.com>
1 file changed