Commit Graph

2998 Commits

Author SHA1 Message Date
Antonio Cansado
c864144517 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev am: dc5f558640 am: 6fe5aa1af4
am: 4247c46428

* commit '4247c464282bf8c9c458090f0e6b491cf9bc8c63':
  Addressing API council comments on NetworkStatsManager.

Change-Id: Ie6455799758f0bdb67440f72c266effaf412e22f
2016-05-10 21:14:09 +00:00
Android Build Merger (Role)
d7021ad5d5 Merge "Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev am: dc5f558640 am: de224ba451" into nyc-mr1-dev-plus-aosp 2016-05-10 21:08:59 +00:00
Antonio Cansado
1d7c800c19 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev am: dc5f558640
am: de224ba451

* commit 'de224ba451547fcc139ec6c565243e0f450ece46':
  Addressing API council comments on NetworkStatsManager.

Change-Id: I1383b3c11653daaa3a0ca34600dbc7e28af24641
2016-05-10 21:08:28 +00:00
Antonio Cansado
4247c46428 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev am: dc5f558640
am: 6fe5aa1af4

* commit '6fe5aa1af45379cc93ec8456b2b947b3a0cfed4a':
  Addressing API council comments on NetworkStatsManager.

Change-Id: Ia886e1ce98520c1618ba501097a2c979a628bbb4
2016-05-10 21:08:25 +00:00
Antonio Cansado
6fe5aa1af4 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev
am: dc5f558640

* commit 'dc5f558640da8785fabc274167ec37a0fda30cd6':
  Addressing API council comments on NetworkStatsManager.

Change-Id: I952e69e7cfbd8cebcbac7c3b19ede300e26777e8
2016-05-10 21:05:17 +00:00
Antonio Cansado
13726d128a Addressing API council comments on NetworkStatsManager.
Callbacks
 - DataUsageCallback renamed to UsageCallback
 - DataUsagePolicy removed; passing in params directly to register method
 - making it an abstract class
 - passing in (networkType, subscriberId) that reached its threshold
 - renaming onLimitReached to onThresholdReached to match existing naming
 - only monitor single network,subscriberId
 - no monitoring of specific uids; using device or user wide instead

Tags
 - only owner uid can read its tags
 - exposing only TAG_NONE to match service side

BUG: 27530098

Change-Id: I2b2664da71806868a1e937d2bf4d1f234637509b
2016-05-10 13:24:16 -07:00
Paul Jensen
a9ae8bb696 ApfFilter unit test
Bug: 26238573

Change-Id: I5171038228782bd54e91f5bcc663cc529d2c1150
2016-05-10 11:54:42 -04:00
Felipe Leme
7c38c68128 Merge "Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 4e40ea69d0" into nyc-mr1-dev-plus-aosp
am: f7d3b5fbd4

* commit 'f7d3b5fbd411a76a8fa5b550da699ed497c315af':

Change-Id: I84bb94fff82e9a7965147b0bb1736ab5529b6c8d
2016-05-06 23:48:57 +00:00
Felipe Leme
89d7d6d5c7 Merge "Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 4e40ea69d0" into nyc-mr1-dev-plus-aosp
am: 725e9d0ad8

* commit '725e9d0ad8a1ba44117d0ed14c424dfb976e967e':

Change-Id: I681d58e763bec7b22b2962c98661576f534d6669
2016-05-06 23:48:54 +00:00
Felipe Leme
04ba6ab37a Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 87d20317bf
am: ffeacedc35

* commit 'ffeacedc355fe9dd8b331a27294eac5dea813e5b':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: I1bc51c4a06dad9245ce0ed884707855b2c04edf1
2016-05-06 23:48:47 +00:00
Android Build Merger (Role)
f7d3b5fbd4 Merge "Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 4e40ea69d0" into nyc-mr1-dev-plus-aosp 2016-05-06 23:47:02 +00:00
Felipe Leme
8ba1a4ad8b Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140
am: 4e40ea69d0

* commit '4e40ea69d0e4cdba9f0215509eadd54d7706eb34':

Change-Id: Ic58995d889136c62d397bb8323ed8b66be90e3cf
2016-05-06 23:46:37 +00:00
Android Build Merger (Role)
725e9d0ad8 Merge "Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 4e40ea69d0" into nyc-mr1-dev-plus-aosp 2016-05-06 23:44:23 +00:00
Felipe Leme
ffeacedc35 Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140
am: 87d20317bf

* commit '87d20317bf26e87ef58798d3c5aafb81aa163788':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: Ifeb332fbf00c554b78d0ad724b34e3a8ebfc9894
2016-05-06 23:43:55 +00:00
Felipe Leme
b6b2eaeb7c Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140
am: 4e40ea69d0

* commit '4e40ea69d0e4cdba9f0215509eadd54d7706eb34':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: I76e419d0d010652699b9081418f5f654763887d1
2016-05-06 23:43:52 +00:00
Felipe Leme
4e40ea69d0 Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev
am: 638a6e8140

* commit '638a6e8140a22a0ddb5d5dacb02173795073bd1a':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: I0fd66b16c83680940f294ea8e117443ffd8a50cd
2016-05-06 23:38:59 +00:00
Felipe Leme
ba4184084f Merge "Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3 am: 0da215640f" into nyc-mr1-dev-plus-aosp
am: 7938df3cfc

* commit '7938df3cfcab9dac33cde9b219f8e3614836ea2b':

Change-Id: I4f87fca12c9b4d8c3e54a5fbb3cf8b991e0d2007
2016-05-06 22:03:23 +00:00
Felipe Leme
623bfd96f1 Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3 am: 65578c827a
am: 1dd2392e2e

* commit '1dd2392e2e11cd5d1442e697470509d64fd456c6':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: I0b348dc47666d563d368d82aa9633dcfe56992a0
2016-05-06 22:03:18 +00:00
Android Build Merger (Role)
7938df3cfc Merge "Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3 am: 0da215640f" into nyc-mr1-dev-plus-aosp 2016-05-06 21:58:55 +00:00
Felipe Leme
ec7b062a3e Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3
am: 0da215640f

* commit '0da215640fa1aa90e7f3063cfa23df629f268ff2':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: I58c29071b21ffdd9285b33964bfc2c5b254dd298
2016-05-06 21:58:26 +00:00
Felipe Leme
1dd2392e2e Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3
am: 65578c827a

* commit '65578c827a30fb7bcedbc960e8623afd6a75b8e5':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: Ie81707e54ebf15e5b01a533bda433551d0a3b73e
2016-05-06 21:58:18 +00:00
Felipe Leme
06ea4b0cf1 Fixed connectivity state in some restricted network scenarios.
NetworkPolicyManagerService (NMPS) keeps an internal list of uid
rules (mUidRules) for network restrictions, and when these rules
changes it needs to notify external listeners (such as
ConnectivityService / CS).

Prior to Android N, both Data Saver mode (the feature previously known
as "Restrict Baground Data") and Battery Save mode used the same set of
firewall rules to implement their restrictions: when Battery Saver mode
NPMS would mark all networks as metered and set the proper firewall
rules externally.

Recently, these 2 modes were split in 2 distinct firewall rules and
NMPS.updateRuleForRestrictBackgroundLocked() was changed to update
the mUidRules logic based on the Data Saver firewall (since the Battery
Saver firewall changes are handled externally, on
updateRuleForRestrictPowerLocked()). As such, CS was not notified when
the power-related changes were made, which would cause apps to get a
state of CONNECTED / CONNECTED when querying its active connection.

Another scenario that is not properly handled is when a UID whitelisted
for Data Saver is brought back to foreground: although the proper
firewall rules are set, CS is not notified, and the apps state would be
DISCONNECTED / BLOCKED.

This CL introduces many changes that fix this issue:

- Fixed updateRuleForRestrictBackgroundLocked() to invoke
  onUidRulesChanged() when the Battery Saver status changed.
- Fixed updateRuleForRestrictBackgroundLocked() to invoke
  onUidRulesChanged() when an app whitelisted for Data Saver is brought
  back to the foreground.
- Added a new API (onRestrictPowerChanged() and getRestrictPower())
  to notify external services about Battery Saver mode changes.
- Fixed CS logic to properly handle the Battery Saver changes.

Externally to this change, the CTS tests were also improved to verify
the apps get the proper connection state; they can be verified running:

cts-tradefed run commandAndExit cts -m CtsHostsideNetworkTests \
    -t com.android.cts.net.HostsideRestrictBackgroundNetworkTests

BUG: 28521946

Change-Id: I8eaccd39968eb4b8c6b34f462fbc541e5daf55f1
2016-05-06 14:53:50 -07:00
Felipe Leme
65578c827a Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev
am: de66540fd3

* commit 'de66540fd3f73937c3cfbe1d50e575aa69acc474':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: I25d2520eafcf8c45b80b94908a3b5bfa04315f76
2016-05-06 21:53:39 +00:00
Felipe Leme
cc2b9c36d3 Refactored NetworkPolicyManagerService mUidRules.
NetworkPolicyManagerService (NMPS) keeps an internal list of uid
rules (mUidRules) for network restrictions, and when these rules
changes it needs to notify external listeners (such as
ConnectivityService / CS).

Prior to Android N, both Data Saver mode (the feature previously known
as "Restrict Baground Data") and Battery Save mode used the same set of
firewall rules to implement their restrictions: when Battery Saver mode
NPMS would mark all networks as metered and set the proper firewall
rules externally.

Recently, these 2 modes were split in 2 distinct firewall rules and
NMPS.updateRuleForRestrictBackgroundLocked() was changed to update
the mUidRules logic based on the Data Saver firewall (since the Battery
Saver firewall changes are handled externally, on
updateRuleForRestrictPowerLocked()). As such, CS was not notified when
the power-related changes were made, which would cause apps to get a
state of CONNECTED / CONNECTED when querying its active connection.

This change refactores the mUidRules to use bitmasks, in preparation for
another change that will fix the issue.

It also fixes a minor bug that was preventing removed packages to be
removed from the whitelist.

BUG: 28521946
Change-Id: I9f0e1509a6192cad403f740c1cd76a6b7dab7d26
2016-05-06 17:58:40 +00:00
Robin Lee
64d5c5e8a1 Merge "Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e am: e5bbf42d23" into nyc-mr1-dev-plus-aosp
am: 06864ec342

* commit '06864ec34283ef08024b4e7ebecfaa68c00cbd42':

Change-Id: I18549dd882c1dd6f2a8e39a170c1defccfc59890
2016-05-04 22:10:41 +00:00
Robin Lee
67372ea20d Merge "Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9 am: f2796025ed" into nyc-mr1-dev-plus-aosp
am: 9eeec0d910

* commit '9eeec0d91099c6881445c229d88458d7f4d0c635':

Change-Id: If71bb13a2871cb577a9b39cf0db9eca0c880d79c
2016-05-04 22:10:33 +00:00
Robin Lee
4385168b4b Merge "Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e am: 78d0888e8c" into nyc-mr1-dev-plus-aosp
am: 062a28b6a4

* commit '062a28b6a403a48d6f5f88e109a899c9c60581c1':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: I9ebd6221451ee10649a1f340031d62c6483832f1
2016-05-04 22:04:40 +00:00
Robin Lee
78442b3022 Merge "Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9 am: 31b3676cce" into nyc-mr1-dev-plus-aosp
am: fbde3272fd

* commit 'fbde3272fd4e49ab269920339793bc40d0cb9628':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: I6e1d6a1977db342f45a1a9114a56c181540e12bf
2016-05-04 22:03:54 +00:00
Android Build Merger (Role)
06864ec342 Merge "Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e am: e5bbf42d23" into nyc-mr1-dev-plus-aosp 2016-05-04 21:48:26 +00:00
Android Build Merger (Role)
9eeec0d910 Merge "Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9 am: f2796025ed" into nyc-mr1-dev-plus-aosp 2016-05-04 21:48:10 +00:00
Robin Lee
61f7678c55 Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e
am: e5bbf42d23

* commit 'e5bbf42d23244a2c99bea9cb4180270e6ac53f74':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: I79cc73d918ff368534d7e269291cb6d24e6774ac
2016-05-04 21:42:55 +00:00
Robin Lee
939c283b12 Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9
am: f2796025ed

* commit 'f2796025edb2dbc53cef002fa92760352e55b6af':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: Ibb02f2731536ebafaa4c24ef5cd2113f7cd43632
2016-05-04 21:42:47 +00:00
Robin Lee
88228712ee Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e
am: 78d0888e8c

* commit '78d0888e8c9358681a6f564b30b2cc35bbe72a45':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: I7ec39775980ec839aa814cf284ea352789aa788f
2016-05-04 21:41:23 +00:00
Robin Lee
26847f53fd Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9
am: 31b3676cce

* commit '31b3676ccec847b1e86c23b2f5073dc1cc83abf4':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: I6bb605a83b96a3efab36ab6a7bdb5859e1eafea8
2016-05-04 21:40:46 +00:00
Robin Lee
e5bbf42d23 Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev
am: fb0faa494e

* commit 'fb0faa494efd998145d4f20b12f31c10b47cb0f1':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: Ibc69bb988ba0d1e641ee48fb5a844dc414f58e07
2016-05-04 18:55:54 +00:00
Robin Lee
f2796025ed Merge changes I31d5260d,Ied92f558 into nyc-dev
am: c58c9ae0a9

* commit 'c58c9ae0a931b6c71d7924cfd4e900e8919a6fcc':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: I55167ad8f3cde11407a2d35b0f859c263c0fbbec
2016-05-04 18:55:11 +00:00
Robin Lee
fb0faa494e Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev 2016-05-04 18:38:30 +00:00
Robin Lee
c58c9ae0a9 Merge changes I31d5260d,Ied92f558 into nyc-dev
* changes:
  Start VPN as early as possible during startup
  Split network agent created state from connected state
2016-05-04 18:35:19 +00:00
Robin Lee
c4980d88aa Start VPN as early as possible during startup
- Switch from USER_STARTING to USER_STARTED which is the foreground
  version of the broadcast

- Set the new VPN network as CONNECTING initially to avoid spamming
  apps with useless notifications ahead of the network being fully
  available

Bug: 26694104
Fix: 28335277
Change-Id: I31d5260dda62ff440c31c44eb0aa5c891e2717e5
2016-05-04 17:46:10 +01:00
Robin Lee
a8c0b6ef7e Split network agent created state from connected state
Network creation setup sometimes involves extra steps after actually
calling into netd to create the underlying network, rules & routes &
to begin allowing sockets bound to it.

For example, VPN networks can set a UID whitelist or blacklist. This
should happen:

  - AFTER there is a netID & network created in netd as
    network-specific rules will need to be tied to / point at it. Those
    rules are tied to the lifecycle of netd's network which is tracked
    by `NetworkAgentInfo.created` on the frameworks side.

  - BEFORE the CONNECTED broadcast and network callbacks have been sent
    out so that we don't create a race condition between clients that
    want to use the network and the server actually having the network
    ready

The race condition existed prior to this change and required any client
making use of network callbacks to sleep for a short amount of time after
receiving to actually be able to use the network.

Among other things, that race condition is now fixed.

Bug: 26694104
Change-Id: Ied92f5588a98c3e97f456bc98b676bf201ab5472
2016-05-04 16:24:46 +00:00
Robin Lee
94e69beca3 Add lockdownEnabled parameter to always-on VPN API
Allows callers to opt-out of blockading network traffic during boot and
on VPN app failure.

Bug: 26694104
Change-Id: Ibfbd43ad09a25f2e38053fcd6306df3711f8bde2
2016-05-03 13:24:42 +01:00
Lorenzo Colitti
fd75c2794d Merge "Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d am: 3ac235673c" into nyc-mr1-dev-plus-aosp
am: db023f0663

* commit 'db023f06633e03c5914b7488c6ed0f45ba2bad35':

Change-Id: Ifc14f948bdda1fed18bce50c6642dd154eaff0ed
2016-05-02 13:12:37 +00:00
Pierre Imai
f38bdc499f Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d am: ddb5e9164d
am: e5243a3a5a

* commit 'e5243a3a5aca5d239d96fe71b67ae6935485a6cc':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I83cb2668c50e910a7ce3a4dede7414b4c2bfa8d9
2016-05-02 13:08:34 +00:00
Android Build Merger (Role)
db023f0663 Merge "Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d am: 3ac235673c" into nyc-mr1-dev-plus-aosp 2016-05-02 13:05:01 +00:00
Lorenzo Colitti
b832193f48 Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d
am: 3ac235673c

* commit '3ac235673cc49f7648cef4710522cc2ce76021aa':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I69f888bb27b3bd632f63ec95558db14d59605c71
2016-05-02 13:04:25 +00:00
Lorenzo Colitti
e5243a3a5a Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d
am: ddb5e9164d

* commit 'ddb5e9164dd5610626f2cec622e7083fed444b5d':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I36c07f09ac62620fd4119eff1f9da5a278d08144
2016-05-02 13:04:22 +00:00
Pierre Imai
ddb5e9164d Merge changes I86257bc8,I5c2221c5 into nyc-dev
am: 20f253eb7d

* commit '20f253eb7d82f980d1c6cbab2b06315a027ed62c':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I80fdc381bd3ff33a8efa6624d7115c346789ca17
2016-05-02 13:00:13 +00:00
Lorenzo Colitti
20f253eb7d Merge changes I86257bc8,I5c2221c5 into nyc-dev
* changes:
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.
2016-05-02 12:49:19 +00:00
Pierre Imai
2166469c85 Use Netd's binder interface to set resolver configuration.
BUG: 25731675
Change-Id: I86257bc84371832466161e5357ae173c305a7d18
2016-05-02 08:29:21 +00:00
Jeff Sharkey
61d436da40 Merge "Merge "Flag to mark foreground jobs, fix data saver." into nyc-dev am: 9a977b7d45 am: 0c5c67f743" into nyc-mr1-dev-plus-aosp
am: e041484836

* commit 'e041484836467fc8e50f2ce3bb5b5b39f8d91ef1':

Change-Id: Idf6c3f6d9be248209ae5f135a88677a2423e72a9
2016-04-29 23:06:32 +00:00