platform_system_netd/server/StrictControllerTest.cpp, branch master

Strict-related commands porting

2018-08-01T15:29:15+00:00

Test: built, flashed, booted
      system/netd/tests/runtests.sh passes

Change-Id: Ibff8b050915c65e44cd37bb835943b8582fc003a

Don't trip up when deleting strict iptables rules.

2017-10-03T15:04:19+00:00

Currently, when applying a cleartext policy to a UID,
StrictController will attempt to delete all possible policies
that might previously have applied to this UID. Because only
two of these rules can exist at any given time, at least one
of these deletes is guaranteed to fail, causing the whole
operation to fail.

Instead of adding a log or reject rule for every UID, add a
rule that sends that UID to its own chain which then contains
the log or reject rule. That way, deleting the previous policy
only requires deleting the chain, which is something we know
exists.

(cherry picked from commit 81e02f21424ebda9a314c7b9fbc31cfe2a99444f)

Bug: 64988066
Test: netd_{unit,integration}_test pass
Test: android.os.cts.StrictModeTest passes
Change-Id: Ic9d66220a65f2ce9510c4194e7b874d3d5dca5d7

Move the last StrictController command to iptables-restore

2017-07-18T12:47:33+00:00

Bug: 28362720
Test: unit tests pass
Change-Id: I8a4d2b8ea66799c6c3205b00f04ee1999fc7c68b

Add a test for setUidCleartextPolicy.

2017-07-18T09:54:51+00:00

Bug: 28362720
Test: netd_{unit,integration}_test pass
Change-Id: Ie4577b29230282e0e6c9ae0ae6727af78e8b0849

Delete all EOTs in iptables commands and remove fixCommandString.

2017-02-10T02:41:27+00:00

Test: bullead builds and boots with no iptables errors
Test: netd_{unit,integration}_test pass
Bug: 32323979
Change-Id: I33ad04ee8f0562bcd4e14046352c934cd2039a5d

Use iptables-restore in StrictController startup.

2016-03-30T07:43:58+00:00

Bug: 21725996
Change-Id: I2c049a934189f3c87ee15f052abc07d35814f0c9

Add a test for StrictController.

2016-03-30T07:43:53+00:00

Bug: 21725996
Bug: 25691379
Change-Id: I24b838161eaf98dede2ae897157ba42414fc926f