apmanager: add DHCP firewall rule per interface basis
With the recent update in permission_broker to allow firewall rules per
interface basis, update apmanager to dynamically request/release DHCP
port access when an AP service is started/terminated. And only request
the port access for the interface that AP service is running on.
BUG=chromium:450408
TEST=USE="asan clang" FEATURES=test emerge-$BOARD apmanager
Run security_Firewall test
Manual Test:
1. Use "iptables -S" command to verify no firewall rule is added
for port 67 when AP service is not started.
2. Start an AP service, verify firewall rule for port 67 is added
for the wifi interface (wlan0 for wolf device) and client can
connect to it with IP connectivity.
3. Stop the AP service, verify firewall rule for port 67 is deleted.
CQ-DEPEND=CL:252931
Change-Id: If7a5150d224ff1a5085b5e8032a162e8ca07c545
Reviewed-on: https://chromium-review.googlesource.com/252941
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Tested-by: Zeping Qiu <zqiu@chromium.org>
Commit-Queue: Zeping Qiu <zqiu@chromium.org>
7 files changed