18b7262f60529f41deb8f141cf563c8d65608be3 - android_packages_modules_Connectivity

commit	18b7262f60529f41deb8f141cf563c8d65608be3	[log] [tgz]
author	Sarup Dalwani <sarup@google.com>	Sat Feb 08 04:06:44 2025 +0000
committer	Sarup Dalwani <sarup@google.com>	Mon Feb 17 20:34:41 2025 +0000
tree	784acee603c53486dd888b15aec8013ae036eb6c
parent	f2ae113d539199538da529880fea86f99ede75c6 [diff]

Populating local addresses to local_net_access_map

Whenever LinkProperties is added/modified/removes, we are updating local
network prefixes for the modified interface/addresses. These prefixes
are used by BPF egress and ingress cgroup hooks to disallow local
network packets if the calling application do not have required
permission.

Bug: 369815823
Test: Manually tested
Test: atest ConnectivityCoverageTests:android.net.connectivity.com.android.server.BpfNetMapsTest
Test: atest ConnectivityCoverageTests:android.net.connectivity.com.android.server.CSLocalNetworkProtectionTest
Change-Id: Ie592ecb948ae05a0a73f47d0573560eb705f6bcf

service/src/com/android/server/BpfNetMaps.java[diff]
service/src/com/android/server/ConnectivityService.java[diff]
staticlibs/framework/com/android/net/module/util/NetworkStackConstants.java[diff]
tests/unit/java/com/android/server/BpfNetMapsTest.java[diff]
tests/unit/java/com/android/server/connectivityservice/CSLocalNetworkProtectionTest.kt[Added - diff]

5 files changed

tree: 784acee603c53486dd888b15aec8013ae036eb6c