diff options
| author | Patrick Rohr <prohr@google.com> | 2020-11-19 11:28:13 +0100 |
|---|---|---|
| committer | Patrick Rohr <prohr@google.com> | 2020-11-30 18:36:02 +0100 |
| commit | 9aabc50ec9ccdf2e43a487f2b21c18890024e3ab (patch) | |
| tree | 4162cec132c9c0364d4eb2cc357e56ef2b50bac3 /tests/net/java/com/android | |
| parent | 73a74fa6dde8bb5654828f70b3a33f968fb33676 (diff) | |
Add Restricted Mode Firewall Chain
Adding new allowlist firewall chain to support restricted networking
mode. See go/restricted-networking-mode.
Bug: b/157505406
Bug: b/170323408
Test: atest NetworkManagementServiceTest
Change-Id: I8e39b3d7b129ad74224d0c1311135b7b48f6514f
Diffstat (limited to 'tests/net/java/com/android')
| -rw-r--r-- | tests/net/java/com/android/server/NetworkManagementServiceTest.java | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/tests/net/java/com/android/server/NetworkManagementServiceTest.java b/tests/net/java/com/android/server/NetworkManagementServiceTest.java index b8b588695127..ea763d2e931e 100644 --- a/tests/net/java/com/android/server/NetworkManagementServiceTest.java +++ b/tests/net/java/com/android/server/NetworkManagementServiceTest.java @@ -279,11 +279,18 @@ public class NetworkManagementServiceTest { isRestrictedForStandby.put(INetd.FIREWALL_RULE_ALLOW, false); isRestrictedForStandby.put(INetd.FIREWALL_RULE_DENY, true); expected.put(INetd.FIREWALL_CHAIN_STANDBY, isRestrictedForStandby); + // Restricted mode chain + final ArrayMap<Integer, Boolean> isRestrictedForRestrictedMode = new ArrayMap<>(); + isRestrictedForRestrictedMode.put(NetworkPolicyManager.FIREWALL_RULE_DEFAULT, true); + isRestrictedForRestrictedMode.put(INetd.FIREWALL_RULE_ALLOW, false); + isRestrictedForRestrictedMode.put(INetd.FIREWALL_RULE_DENY, true); + expected.put(INetd.FIREWALL_CHAIN_RESTRICTED, isRestrictedForRestrictedMode); final int[] chains = { INetd.FIREWALL_CHAIN_STANDBY, INetd.FIREWALL_CHAIN_POWERSAVE, - INetd.FIREWALL_CHAIN_DOZABLE + INetd.FIREWALL_CHAIN_DOZABLE, + INetd.FIREWALL_CHAIN_RESTRICTED }; final int[] states = { INetd.FIREWALL_RULE_ALLOW, |