diff options
Diffstat (limited to 'services')
| -rw-r--r-- | services/core/java/com/android/server/net/LockdownVpnTracker.java | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/services/core/java/com/android/server/net/LockdownVpnTracker.java b/services/core/java/com/android/server/net/LockdownVpnTracker.java index cf0aba4..3a1e4a4 100644 --- a/services/core/java/com/android/server/net/LockdownVpnTracker.java +++ b/services/core/java/com/android/server/net/LockdownVpnTracker.java @@ -35,6 +35,7 @@ import android.os.INetworkManagementService; import android.os.RemoteException; import android.security.Credentials; import android.security.KeyStore; +import android.system.Os; import android.text.TextUtils; import android.util.Slog; @@ -64,6 +65,8 @@ public class LockdownVpnTracker { private static final String ACTION_VPN_SETTINGS = "android.net.vpn.SETTINGS"; private static final String EXTRA_PICK_LOCKDOWN = "android.net.vpn.PICK_LOCKDOWN"; + private static final int ROOT_UID = 0; + private final Context mContext; private final INetworkManagementService mNetService; private final ConnectivityService mConnService; @@ -193,6 +196,9 @@ public class LockdownVpnTracker { setFirewallEgressSourceRule(addr, true); } + mNetService.setFirewallUidRule(ROOT_UID, true); + mNetService.setFirewallUidRule(Os.getuid(), true); + mErrorCount = 0; mAcceptedIface = iface; mAcceptedSourceAddr = sourceAddrs; @@ -279,6 +285,10 @@ public class LockdownVpnTracker { for (LinkAddress addr : mAcceptedSourceAddr) { setFirewallEgressSourceRule(addr, false); } + + mNetService.setFirewallUidRule(ROOT_UID, false); + mNetService.setFirewallUidRule(Os.getuid(), false); + mAcceptedSourceAddr = null; } } catch (RemoteException e) { |