Commit Graph

2924 Commits

Author SHA1 Message Date
Antonio Cansado
1d7c800c19 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev am: dc5f558640
am: de224ba451

* commit 'de224ba451547fcc139ec6c565243e0f450ece46':
  Addressing API council comments on NetworkStatsManager.

Change-Id: I1383b3c11653daaa3a0ca34600dbc7e28af24641
2016-05-10 21:08:28 +00:00
Antonio Cansado
4247c46428 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev am: dc5f558640
am: 6fe5aa1af4

* commit '6fe5aa1af45379cc93ec8456b2b947b3a0cfed4a':
  Addressing API council comments on NetworkStatsManager.

Change-Id: Ia886e1ce98520c1618ba501097a2c979a628bbb4
2016-05-10 21:08:25 +00:00
Antonio Cansado
6fe5aa1af4 Merge "Addressing API council comments on NetworkStatsManager." into nyc-dev
am: dc5f558640

* commit 'dc5f558640da8785fabc274167ec37a0fda30cd6':
  Addressing API council comments on NetworkStatsManager.

Change-Id: I952e69e7cfbd8cebcbac7c3b19ede300e26777e8
2016-05-10 21:05:17 +00:00
Antonio Cansado
13726d128a Addressing API council comments on NetworkStatsManager.
Callbacks
 - DataUsageCallback renamed to UsageCallback
 - DataUsagePolicy removed; passing in params directly to register method
 - making it an abstract class
 - passing in (networkType, subscriberId) that reached its threshold
 - renaming onLimitReached to onThresholdReached to match existing naming
 - only monitor single network,subscriberId
 - no monitoring of specific uids; using device or user wide instead

Tags
 - only owner uid can read its tags
 - exposing only TAG_NONE to match service side

BUG: 27530098

Change-Id: I2b2664da71806868a1e937d2bf4d1f234637509b
2016-05-10 13:24:16 -07:00
Paul Jensen
a9ae8bb696 ApfFilter unit test
Bug: 26238573

Change-Id: I5171038228782bd54e91f5bcc663cc529d2c1150
2016-05-10 11:54:42 -04:00
Android Build Merger (Role)
f7d3b5fbd4 Merge "Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 4e40ea69d0" into nyc-mr1-dev-plus-aosp 2016-05-06 23:47:02 +00:00
Felipe Leme
8ba1a4ad8b Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140
am: 4e40ea69d0

* commit '4e40ea69d0e4cdba9f0215509eadd54d7706eb34':

Change-Id: Ic58995d889136c62d397bb8323ed8b66be90e3cf
2016-05-06 23:46:37 +00:00
Android Build Merger (Role)
725e9d0ad8 Merge "Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140 am: 4e40ea69d0" into nyc-mr1-dev-plus-aosp 2016-05-06 23:44:23 +00:00
Felipe Leme
ffeacedc35 Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140
am: 87d20317bf

* commit '87d20317bf26e87ef58798d3c5aafb81aa163788':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: Ifeb332fbf00c554b78d0ad724b34e3a8ebfc9894
2016-05-06 23:43:55 +00:00
Felipe Leme
b6b2eaeb7c Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev am: 638a6e8140
am: 4e40ea69d0

* commit '4e40ea69d0e4cdba9f0215509eadd54d7706eb34':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: I76e419d0d010652699b9081418f5f654763887d1
2016-05-06 23:43:52 +00:00
Felipe Leme
4e40ea69d0 Merge "Fixed connectivity state in some restricted network scenarios." into nyc-dev
am: 638a6e8140

* commit '638a6e8140a22a0ddb5d5dacb02173795073bd1a':
  Fixed connectivity state in some restricted network scenarios.

Change-Id: I0fd66b16c83680940f294ea8e117443ffd8a50cd
2016-05-06 23:38:59 +00:00
Android Build Merger (Role)
7938df3cfc Merge "Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3 am: 0da215640f" into nyc-mr1-dev-plus-aosp 2016-05-06 21:58:55 +00:00
Felipe Leme
ec7b062a3e Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3
am: 0da215640f

* commit '0da215640fa1aa90e7f3063cfa23df629f268ff2':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: I58c29071b21ffdd9285b33964bfc2c5b254dd298
2016-05-06 21:58:26 +00:00
Felipe Leme
1dd2392e2e Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev am: de66540fd3
am: 65578c827a

* commit '65578c827a30fb7bcedbc960e8623afd6a75b8e5':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: Ie81707e54ebf15e5b01a533bda433551d0a3b73e
2016-05-06 21:58:18 +00:00
Felipe Leme
06ea4b0cf1 Fixed connectivity state in some restricted network scenarios.
NetworkPolicyManagerService (NMPS) keeps an internal list of uid
rules (mUidRules) for network restrictions, and when these rules
changes it needs to notify external listeners (such as
ConnectivityService / CS).

Prior to Android N, both Data Saver mode (the feature previously known
as "Restrict Baground Data") and Battery Save mode used the same set of
firewall rules to implement their restrictions: when Battery Saver mode
NPMS would mark all networks as metered and set the proper firewall
rules externally.

Recently, these 2 modes were split in 2 distinct firewall rules and
NMPS.updateRuleForRestrictBackgroundLocked() was changed to update
the mUidRules logic based on the Data Saver firewall (since the Battery
Saver firewall changes are handled externally, on
updateRuleForRestrictPowerLocked()). As such, CS was not notified when
the power-related changes were made, which would cause apps to get a
state of CONNECTED / CONNECTED when querying its active connection.

Another scenario that is not properly handled is when a UID whitelisted
for Data Saver is brought back to foreground: although the proper
firewall rules are set, CS is not notified, and the apps state would be
DISCONNECTED / BLOCKED.

This CL introduces many changes that fix this issue:

- Fixed updateRuleForRestrictBackgroundLocked() to invoke
  onUidRulesChanged() when the Battery Saver status changed.
- Fixed updateRuleForRestrictBackgroundLocked() to invoke
  onUidRulesChanged() when an app whitelisted for Data Saver is brought
  back to the foreground.
- Added a new API (onRestrictPowerChanged() and getRestrictPower())
  to notify external services about Battery Saver mode changes.
- Fixed CS logic to properly handle the Battery Saver changes.

Externally to this change, the CTS tests were also improved to verify
the apps get the proper connection state; they can be verified running:

cts-tradefed run commandAndExit cts -m CtsHostsideNetworkTests \
    -t com.android.cts.net.HostsideRestrictBackgroundNetworkTests

BUG: 28521946

Change-Id: I8eaccd39968eb4b8c6b34f462fbc541e5daf55f1
2016-05-06 14:53:50 -07:00
Felipe Leme
65578c827a Merge "Refactored NetworkPolicyManagerService mUidRules." into nyc-dev
am: de66540fd3

* commit 'de66540fd3f73937c3cfbe1d50e575aa69acc474':
  Refactored NetworkPolicyManagerService mUidRules.

Change-Id: I25d2520eafcf8c45b80b94908a3b5bfa04315f76
2016-05-06 21:53:39 +00:00
Felipe Leme
cc2b9c36d3 Refactored NetworkPolicyManagerService mUidRules.
NetworkPolicyManagerService (NMPS) keeps an internal list of uid
rules (mUidRules) for network restrictions, and when these rules
changes it needs to notify external listeners (such as
ConnectivityService / CS).

Prior to Android N, both Data Saver mode (the feature previously known
as "Restrict Baground Data") and Battery Save mode used the same set of
firewall rules to implement their restrictions: when Battery Saver mode
NPMS would mark all networks as metered and set the proper firewall
rules externally.

Recently, these 2 modes were split in 2 distinct firewall rules and
NMPS.updateRuleForRestrictBackgroundLocked() was changed to update
the mUidRules logic based on the Data Saver firewall (since the Battery
Saver firewall changes are handled externally, on
updateRuleForRestrictPowerLocked()). As such, CS was not notified when
the power-related changes were made, which would cause apps to get a
state of CONNECTED / CONNECTED when querying its active connection.

This change refactores the mUidRules to use bitmasks, in preparation for
another change that will fix the issue.

It also fixes a minor bug that was preventing removed packages to be
removed from the whitelist.

BUG: 28521946
Change-Id: I9f0e1509a6192cad403f740c1cd76a6b7dab7d26
2016-05-06 17:58:40 +00:00
Android Build Merger (Role)
06864ec342 Merge "Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e am: e5bbf42d23" into nyc-mr1-dev-plus-aosp 2016-05-04 21:48:26 +00:00
Android Build Merger (Role)
9eeec0d910 Merge "Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9 am: f2796025ed" into nyc-mr1-dev-plus-aosp 2016-05-04 21:48:10 +00:00
Robin Lee
61f7678c55 Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e
am: e5bbf42d23

* commit 'e5bbf42d23244a2c99bea9cb4180270e6ac53f74':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: I79cc73d918ff368534d7e269291cb6d24e6774ac
2016-05-04 21:42:55 +00:00
Robin Lee
939c283b12 Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9
am: f2796025ed

* commit 'f2796025edb2dbc53cef002fa92760352e55b6af':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: Ibb02f2731536ebafaa4c24ef5cd2113f7cd43632
2016-05-04 21:42:47 +00:00
Robin Lee
88228712ee Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev am: fb0faa494e
am: 78d0888e8c

* commit '78d0888e8c9358681a6f564b30b2cc35bbe72a45':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: I7ec39775980ec839aa814cf284ea352789aa788f
2016-05-04 21:41:23 +00:00
Robin Lee
26847f53fd Merge changes I31d5260d,Ied92f558 into nyc-dev am: c58c9ae0a9
am: 31b3676cce

* commit '31b3676ccec847b1e86c23b2f5073dc1cc83abf4':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: I6bb605a83b96a3efab36ab6a7bdb5859e1eafea8
2016-05-04 21:40:46 +00:00
Robin Lee
e5bbf42d23 Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev
am: fb0faa494e

* commit 'fb0faa494efd998145d4f20b12f31c10b47cb0f1':
  Add lockdownEnabled parameter to always-on VPN API

Change-Id: Ibc69bb988ba0d1e641ee48fb5a844dc414f58e07
2016-05-04 18:55:54 +00:00
Robin Lee
f2796025ed Merge changes I31d5260d,Ied92f558 into nyc-dev
am: c58c9ae0a9

* commit 'c58c9ae0a931b6c71d7924cfd4e900e8919a6fcc':
  Start VPN as early as possible during startup
  Split network agent created state from connected state

Change-Id: I55167ad8f3cde11407a2d35b0f859c263c0fbbec
2016-05-04 18:55:11 +00:00
Robin Lee
fb0faa494e Merge "Add lockdownEnabled parameter to always-on VPN API" into nyc-dev 2016-05-04 18:38:30 +00:00
Robin Lee
c58c9ae0a9 Merge changes I31d5260d,Ied92f558 into nyc-dev
* changes:
  Start VPN as early as possible during startup
  Split network agent created state from connected state
2016-05-04 18:35:19 +00:00
Robin Lee
c4980d88aa Start VPN as early as possible during startup
- Switch from USER_STARTING to USER_STARTED which is the foreground
  version of the broadcast

- Set the new VPN network as CONNECTING initially to avoid spamming
  apps with useless notifications ahead of the network being fully
  available

Bug: 26694104
Fix: 28335277
Change-Id: I31d5260dda62ff440c31c44eb0aa5c891e2717e5
2016-05-04 17:46:10 +01:00
Robin Lee
a8c0b6ef7e Split network agent created state from connected state
Network creation setup sometimes involves extra steps after actually
calling into netd to create the underlying network, rules & routes &
to begin allowing sockets bound to it.

For example, VPN networks can set a UID whitelist or blacklist. This
should happen:

  - AFTER there is a netID & network created in netd as
    network-specific rules will need to be tied to / point at it. Those
    rules are tied to the lifecycle of netd's network which is tracked
    by `NetworkAgentInfo.created` on the frameworks side.

  - BEFORE the CONNECTED broadcast and network callbacks have been sent
    out so that we don't create a race condition between clients that
    want to use the network and the server actually having the network
    ready

The race condition existed prior to this change and required any client
making use of network callbacks to sleep for a short amount of time after
receiving to actually be able to use the network.

Among other things, that race condition is now fixed.

Bug: 26694104
Change-Id: Ied92f5588a98c3e97f456bc98b676bf201ab5472
2016-05-04 16:24:46 +00:00
Robin Lee
94e69beca3 Add lockdownEnabled parameter to always-on VPN API
Allows callers to opt-out of blockading network traffic during boot and
on VPN app failure.

Bug: 26694104
Change-Id: Ibfbd43ad09a25f2e38053fcd6306df3711f8bde2
2016-05-03 13:24:42 +01:00
Android Build Merger (Role)
db023f0663 Merge "Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d am: 3ac235673c" into nyc-mr1-dev-plus-aosp 2016-05-02 13:05:01 +00:00
Lorenzo Colitti
b832193f48 Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d
am: 3ac235673c

* commit '3ac235673cc49f7648cef4710522cc2ce76021aa':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I69f888bb27b3bd632f63ec95558db14d59605c71
2016-05-02 13:04:25 +00:00
Lorenzo Colitti
e5243a3a5a Merge changes I86257bc8,I5c2221c5 into nyc-dev am: 20f253eb7d
am: ddb5e9164d

* commit 'ddb5e9164dd5610626f2cec622e7083fed444b5d':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I36c07f09ac62620fd4119eff1f9da5a278d08144
2016-05-02 13:04:22 +00:00
Pierre Imai
ddb5e9164d Merge changes I86257bc8,I5c2221c5 into nyc-dev
am: 20f253eb7d

* commit '20f253eb7d82f980d1c6cbab2b06315a027ed62c':
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.

Change-Id: I80fdc381bd3ff33a8efa6624d7115c346789ca17
2016-05-02 13:00:13 +00:00
Lorenzo Colitti
20f253eb7d Merge changes I86257bc8,I5c2221c5 into nyc-dev
* changes:
  Use Netd's binder interface to set resolver configuration.
  Add Gservices settings for resolver configuration.
2016-05-02 12:49:19 +00:00
Pierre Imai
2166469c85 Use Netd's binder interface to set resolver configuration.
BUG: 25731675
Change-Id: I86257bc84371832466161e5357ae173c305a7d18
2016-05-02 08:29:21 +00:00
Android Build Merger (Role)
e041484836 Merge "Merge "Flag to mark foreground jobs, fix data saver." into nyc-dev am: 9a977b7d45 am: 0c5c67f743" into nyc-mr1-dev-plus-aosp 2016-04-29 23:02:13 +00:00
Jeff Sharkey
c4c37fc1c3 Merge "Flag to mark foreground jobs, fix data saver." into nyc-dev am: 9a977b7d45
am: 0c5c67f743

* commit '0c5c67f743abeba5c30112634ce82fd63ae2d1a1':
  Flag to mark foreground jobs, fix data saver.

Change-Id: Idbf3bdfc76cadfbcb6bbf17ac1aa99df72a7a0a1
2016-04-29 23:01:49 +00:00
Jeff Sharkey
25bbae6e74 Merge "Flag to mark foreground jobs, fix data saver." into nyc-dev am: 9a977b7d45
am: 4b6d6eb09f

* commit '4b6d6eb09fe922be19fac9fa1b289584e84d1bb0':
  Flag to mark foreground jobs, fix data saver.

Change-Id: I30b87193a1d5d45f4ffeb919276a70ae709a1cdc
2016-04-29 23:01:47 +00:00
Jeff Sharkey
4b6d6eb09f Merge "Flag to mark foreground jobs, fix data saver." into nyc-dev
am: 9a977b7d45

* commit '9a977b7d45df0d3d59c5eec7f9534c3bd5fcd91d':
  Flag to mark foreground jobs, fix data saver.

Change-Id: I908d725a84e9590d0da38a586b066a63473d4f28
2016-04-29 22:59:31 +00:00
Jeff Sharkey
7dbf83df03 Flag to mark foreground jobs, fix data saver.
When a job will eventually run in the foreground, the internal
scheduling needs to ignore any background network restrictions when
satisfying constraints.  This also means the job should ignore the
current device doze state, since the requesting app could get the
same behavior by starting their own foreground service.

Always dispatch network policy changes to ConnectivityService first
to ensure that it has up-to-date information.  Fix bugs around data
saver that were causing networks to not be marked as BLOCKED for
background apps; before this fix apps would have been spinning in
internal connectivity loops, thinking that the network was actually
connected when the kernel was actually blocking their traffic.

Offer new ConnectivityService method overloads to ignore the blocked
state for a specific UID.

Print unsatisfied job constraints to aid debugging.

Bug: 26571724
Change-Id: Iaaa17933e6dc1bf6d3dff26d0bfc12222e51e241
2016-04-29 13:44:07 -06:00
Android Build Merger (Role)
594e5455d3 Merge "Merge "Stop user faster and clear stale broadcasts" into nyc-dev am: ec6faca007 am: 9dee0bccd8" into nyc-mr1-dev-plus-aosp 2016-04-29 00:59:33 +00:00
Amith Yamasani
cb0a78fd39 Merge "Stop user faster and clear stale broadcasts" into nyc-dev am: ec6faca007
am: 9dee0bccd8

* commit '9dee0bccd8e692d1ca86bcf7180170f153dc99c7':
  Stop user faster and clear stale broadcasts

Change-Id: I16c4c1dfcff9f4d63da0444923a29fda0bea5ee8
2016-04-29 00:59:02 +00:00
Amith Yamasani
49392af782 Merge "Stop user faster and clear stale broadcasts" into nyc-dev am: ec6faca007
am: 2bb6008a4c

* commit '2bb6008a4cd20654b268e13276c6a56ecc0eab2b':
  Stop user faster and clear stale broadcasts

Change-Id: I423d1f8448f8ba5b54f90a2fa192f231f38b761c
2016-04-29 00:58:58 +00:00
Amith Yamasani
2bb6008a4c Merge "Stop user faster and clear stale broadcasts" into nyc-dev
am: ec6faca007

* commit 'ec6faca0078263dfbf2b41d11cdb14586e40fd75':
  Stop user faster and clear stale broadcasts

Change-Id: I36eeb177791730a26077542606559e3e4428b87e
2016-04-29 00:56:43 +00:00
Amith Yamasani
e095d2f708 Stop user faster and clear stale broadcasts
Moved several USER_STOPPING registered receivers to listen
to USER_STOPPED, since they don't need to be blocking the
shutdown of the user.

Clear all stale broadcasts when stopping a user, so that we
don't unnecessarily start up processes and deliver stale
broadcasts. This was causing code to run when the user was
already stopped and resulted in crashes when other providers
and services couldn't be started anymore. Hopefully this fixes
many of those races.

Bug: 28371487
Change-Id: Ic35a7a23fa8fe009a53f8bf7545d4dad5fa34134
2016-04-28 10:02:44 -07:00
TreeHugger Robot
33ec77265a Merge "Tethering and Data Saver: There Can Be Only One!" into nyc-dev am: 5af619f
am: 7f026f8

* commit '7f026f8927c30180817f46ee38ee292ad05997ff':
  Tethering and Data Saver: There Can Be Only One!

Change-Id: Idb0ab16443ca061f97ed2f12e0ee01d9fa61b187
2016-04-27 23:40:42 +00:00
Felipe Leme
7f026f8927 Merge "Tethering and Data Saver: There Can Be Only One!" into nyc-dev
am: 5af619f

* commit '5af619f1cdd78fa1cd799ea05f1b59b75b589a0d':
  Tethering and Data Saver: There Can Be Only One!

Change-Id: I876c9a30e9451b1c346296c233068bdfb579f584
2016-04-27 23:31:49 +00:00
TreeHugger Robot
5af619f1cd Merge "Tethering and Data Saver: There Can Be Only One!" into nyc-dev 2016-04-27 22:41:13 +00:00
Android Build Merger (Role)
ca295bc1e0 Merge "Merge changes I8de95add,Ia6f4ccfd into nyc-dev am: 6333d09 am: d00f83f" into nyc-mr1-dev-plus-aosp 2016-04-27 02:02:03 +00:00