Add app strict leak blocking - #46

Open

liamsmith827 wants to merge 13 commits into

GrapheneOS:17from

liamsmith827:17_07-18_so-bindtodevice-blocking-pr

Commits on Aug 18, 2026

Revert "prevent SO_BINDTODEVICE for uids under lockdown VPN"
liamsmith827
committed
3972eed
fixup! drop multicast when lockdown VPN enabled
liamsmith827
committed
4aaf69b
add strict leak blocking BPF rule
liamsmith827
committed
9794129
add services.core dependency to ConnectivityCoverageTests
liamsmith827
committed
82d2b43
update BroadcastReceiveHelperTest command
liamsmith827
committed
e3f8bbd
add additional broadcasts to BroadcastReceiveHelper
liamsmith827
committed
6b1b7fb
handle system/non-system packages in PermissionMonitorTest
liamsmith827
committed
ba373e4
update PermissionMonitorTest command
liamsmith827
committed
4cedff3
mock getPackageInfoAsUser() in PermissionMonitorTest
liamsmith827
committed
8f686c9
add strict leak blocking BPF map population
liamsmith827
committed
5cdba14
update ConnectivityServiceTest command
liamsmith827
committed
cc17bf2
add SO_BINDTODEVICE event listening infra
liamsmith827
committed
40d35e3
add SO_BINDTODEVICE block/notify
liamsmith827
committed
9e12aa7