Server API to only allow networking by VPN apps
Secure virtual networks already create rules to route all traffic into
theirselves. This depends on the secure network already existing.
API creates an ip rule at a priority level below SECURE_VPN which
can catch traffic before VPN comes up, if it is a requirement that no
traffic ever leaves without first going through VPN.
Bug: 26694104
Bug: 26354134
Change-Id: If23df0760c6eb0ad137fc26c5124e48edf23b722
diff --git a/server/NetdNativeService.h b/server/NetdNativeService.h
index 57bb72b..96759e1 100644
--- a/server/NetdNativeService.h
+++ b/server/NetdNativeService.h
@@ -38,7 +38,8 @@
const String16& chainName, bool isWhitelist,
const std::vector<int32_t>& uids, bool *ret) override;
binder::Status bandwidthEnableDataSaver(bool enable, bool *ret) override;
-
+ binder::Status networkRejectNonSecureVpn(bool enable, const std::vector<UidRange>& uids)
+ override;
};
} // namespace net