Examples with LockdownVpnTracker com.android.server.net.LockdownVpnTracker used on opensource projects

Example 11 with LockdownVpnTracker

use of com.android.server.net.LockdownVpnTracker in project android_frameworks_base by ResurrectionRemix.

the class ConnectivityService method updateLockdownVpn.

@Override
public boolean updateLockdownVpn() {
    if (Binder.getCallingUid() != Process.SYSTEM_UID) {
        Slog.w(TAG, "Lockdown VPN only available to AID_SYSTEM");
        return false;
    }
    // Tear down existing lockdown if profile was removed
    mLockdownEnabled = LockdownVpnTracker.isEnabled();
    if (mLockdownEnabled) {
        final String profileName = new String(mKeyStore.get(Credentials.LOCKDOWN_VPN));
        final VpnProfile profile = VpnProfile.decode(profileName, mKeyStore.get(Credentials.VPN + profileName));
        if (profile == null) {
            Slog.e(TAG, "Lockdown VPN configured invalid profile " + profileName);
            setLockdownTracker(null);
            return true;
        }
        int user = UserHandle.getUserId(Binder.getCallingUid());
        synchronized (mVpns) {
            Vpn vpn = mVpns.get(user);
            if (vpn == null) {
                Slog.w(TAG, "VPN for user " + user + " not ready yet. Skipping lockdown");
                return false;
            }
            setLockdownTracker(new LockdownVpnTracker(mContext, mNetd, this, vpn, profile));
        }
    } else {
        setLockdownTracker(null);
    }
    return true;
}

Example 12 with LockdownVpnTracker

use of com.android.server.net.LockdownVpnTracker in project android_frameworks_base by crdroidandroid.

the class ConnectivityService method setLockdownTracker.

/**
     * Internally set new {@link LockdownVpnTracker}, shutting down any existing
     * {@link LockdownVpnTracker}. Can be {@code null} to disable lockdown.
     */
private void setLockdownTracker(LockdownVpnTracker tracker) {
    // Shutdown any existing tracker
    final LockdownVpnTracker existing = mLockdownTracker;
    mLockdownTracker = null;
    if (existing != null) {
        existing.shutdown();
    }
    try {
        if (tracker != null) {
            mNetd.setFirewallEnabled(true);
            mNetd.setFirewallInterfaceRule("lo", true);
            mLockdownTracker = tracker;
            mLockdownTracker.init();
        } else {
            mNetd.setFirewallEnabled(false);
        }
    } catch (RemoteException e) {
    // ignored; NMS lives inside system_server
    }
}