This CL is to convert CF presubmit tests to run in Test Mapping suite.
It has been verified that the test coverage is the same as the original
ATP config.

Bug: 145165552
Bug: 145574049

Test: TreeHugger
      atest ManagedProvisioningTests
Merged-In: I8234cc5cadae2ed2162cb09ec8695c7262fcdb2e
Change-Id: I268448e682b7c45741a62fa3bc1157986f3827d1

* changes:
  Implement getInterfaceHash/Version (omapi)
  Implement getInterfaceHash/Version (health)

From current design, NetworkPolicyManagerService should only
creates metered carrier/mobile templates. However, if someone
calls the hidden API interface or the template was created
before NetworkTemplate#Builder is published. The caller may
create a non-metered carrier template and persist into the
storage.

This CL elimates this possibility and mark non-metered carrier
template non-persistable, so devices could auto-recover from
this symptom after reboot.

Fix: 222382637
Test: TH
Change-Id: Ia7ba3d92a84b8b246a4f11080f6fec0957865650

Test: n/a
Change-Id: I5c5853cfb88c69e5cf39456fbc163af522410331

This reverts commit cb361f1e.

Reason for revert: test failure https://android-build.googleplex.com/builds/tests/view?testResultId=TR86027978682175272&invocationId=I88400010039063162

Change-Id: I398f3b270779c433892cddd238763b031a8ed43a

As these interfaces get frozen for TM, java services
implementing the interfaces are required to implement getInterfaceHash
and getInterfaceVersion [1]

[1]
https://source.android.com/devices/architecture/aidl/stable-aidl#new-meta-interface-methods

Bug: 190577319
Test: m
Change-Id: I274f847ed8156acd0c4b288e306fcab2d380bcd5
Merged-In: I274f847ed8156acd0c4b288e306fcab2d380bcd5

This commit maximizes VCN MTU by considering IP version. Specifically,
VcnGateWayConnection stores/updates the IkeSessionConnectionInfo passed
out from the IKE library during IKE setup and migration. By looking into
the addresses stored in the IkeSessionConnectionInfo, VCN is able to
know the IP family of the VCN tunnels.

Bug: 222331693
Test: atest FrameworksVcnTests(new tests), CtsVcnTestCases
Change-Id: I9a2839d7827f1d6451546ec222129f286e94ae36

* changes:
  Inform the app to wait only if procstate has affect on ntwk access.
  Inform Application thread to block for network rules to be updated.
  Update getUidProcessState to consider mPendingStartActivityUids.
  Inform AMS about the uid blocked reasons.
  Ignore older UID state change callbacks in NPMS.
  Inform NPMS about the app coming to the TOP state early.
  Optimize the handling of disabling doze state.
  Fix the arguments order to postBlockedReasonsChangedMsg.
  Avoid checking for idle state when the app is in top state.
  Update network rules for only uids that are installed.
  Fix logs in NetworkPolicyManagerService.
  Guard mUidBlockedState with a separate lock.
  Add SDK sandbox UIDs to network policy.
  Add some debugs to diagnose test failure.

Merge "BatteryStatsService: Fix wrong arguments passed to noteBluetoothScanStoppedFromSourceLocked."

Bug: 226299593
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: Iad41fa423844dee975c5063c03784e44a68bbfcd
Merged-In: Iad41fa423844dee975c5063c03784e44a68bbfcd

Bug: 226299593
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: Ie37173d0d3f4034a74b834550920530166cd4201
Merged-In: Ie37173d0d3f4034a74b834550920530166cd4201

Bug: 226299593
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: Ib923eafb35c3e315e49dc7a896b5d3dcb8c6f896
Merged-In: Ib923eafb35c3e315e49dc7a896b5d3dcb8c6f896

This will be used to let the application thread
know whether or not to block for network rules to
be updated when coming to the foreground.

Bug: 226299593
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I9bff481a0026fb57af8dbee580e617c8410f9ebe
Merged-In: I9bff481a0026fb57af8dbee580e617c8410f9ebe

Since the onUidStateChanged() callbacks will be
happening from more than one thread, we need to make
sure we only handle the latest uid state change
callbacks and ignore any older callbacks that could
override the latest uid states in NPMS. In order to
this, every uid state change will be associated with
a unique seq number.

Also, remove the UidRecord.lastDispatchedProcStateSeq.
This was added as a safety measure to make sure we
don't unnecessarily end up waiting but it isn't
necessary and if we need to keep it, we need to add
a way to access it without holding global AMS lock,
which isn't worth the complexity.

Bug: 226299593
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I631f5e01f6627916a96c930c22849a1d11eab636
Merged-In: I631f5e01f6627916a96c930c22849a1d11eab636

It's possible for an app to come to the TOP state before
the oomAdj computation is done and we cannot wait for
oomAdj computation to complete and then inform NPMS about
the state change. So, inform NPMS early about the state
change when we know the app is going to the TOP state.

Bug: 226299593
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I5d582618652cead179c419f7fe084283dd89d514
Merged-In: I5d582618652cead179c419f7fe084283dd89d514

When we are handling the callback for doze-disabled
state, we don't have to recompute the network rules
for all uids anymore since we started keeping track of
individual restriction state for each uid. We can
remove the doze restriction state from only blocked uids.

We can also do the same when we are handling the
doze-enabled state (and even other restrictions) but since
NPMS doesn't get callbacks for every uid procstate change,
it is possible we can miss blocking certain uids network.
So, for now limiting the change to only doze-disabled state.

Bug: 206518114
Test: tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I53e40af53aa00ff493e8e5050908220ae4dad729
Merged-In: I53e40af53aa00ff493e8e5050908220ae4dad729

Bug: 226402870
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideNetworkCallbackTests.java
Change-Id: I1977034aa190b67de96d84d694c6546fd9318e79
Merged-In: I1977034aa190b67de96d84d694c6546fd9318e79

When we know that an app moved to a procstate that is considered
an interaction event, the app will not be in idle state. So, avoid
calling into UsageStatsService for idle state in this case.

Bug: 209338078
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I5648db595d2fd10a151da13e472fd905bcafe182
Merged-In: I5648db595d2fd10a151da13e472fd905bcafe182

Not all apps are installed on all users, so only look
at apps which are installed on each user when updating the
rules.

Bug: 209338078
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I3d5327bf4acd9c043483ace7b89576801b9e4ef1
Merged-In: I3d5327bf4acd9c043483ace7b89576801b9e4ef1

We are printing allowlist instead of denylist
and vice versa.

Fixes: 225439337
Test: manual
Change-Id: Iacb78bbf1070a0a822110f961e0240eb10c42bf2
Merged-In: Iacb78bbf1070a0a822110f961e0240eb10c42bf2

Instead of using the main 'mUidRulesFirstLock', add a
granular lock for mUidBlockedState so that network state
requests (which only use mUidBlockedState) doesn't get
blocked on the highly contended 'mUidRulesFirstLock'.

The risk with this change is that it is possible the
underlying firewall rules are not consistent with the
network blocked state that is returned to the apps.
But technically, this is already case if there is an
immediate update to network rules after app queries
it's network access state.

Bug: 209338078
Test: atest tests/cts/hostside/src/com/android/cts/net/HostsideRestrictBackgroundNetworkTests.java
Change-Id: I6a913742647577256c9281dd8ebf4aa5422a49ee
Merged-In: I6a913742647577256c9281dd8ebf4aa5422a49ee

SDK sandbox processes run alongside app processes, and should follow
the same network policy as the app that they belong to. For the relevant
calls into the NetworkManager, add the corresponding SDK sandbox UID to
make sure they have the same policy.

Bug: 215012578
Test: atest NetworkPolicyManagerServiceTest
Change-Id: Iaa2283808071d285953a0de3ed018472a67a1510
Merged-In: Iaa2283808071d285953a0de3ed018472a67a1510

Bug: 218308105
Test: atest com.android.cts.net.HostsideRestrictBackgroundNetworkTests
Change-Id: I29d117a20905c065e50a21591a763fdadd8d2a7b
Merged-In: I29d117a20905c065e50a21591a763fdadd8d2a7b

Bug: 229146532
Test: presubmit
Change-Id: I8bf0c36f471991ab546acd9cf47a3defc13d13ff

If the VpnProfile are built from an Ikev2VpnProfile provisioned
with IkeTunnelConnectionParams, the related Ike options should
come from the IkeTunnelConnectionParams. This commit also allow
Vpn to recognize the new profile type which is built from an
IkeTunnelConnectionParams.

Bug: 223841137
Test: atest FrameworksNetTests
Test: Tested with aosp/2063922
Change-Id: If817774bd940b8b75ec71e1a75bbd385a90ef18a

Arguments in the wrong order were passed to
noteBluetoothScanStoppedFromSourceLocked in noteBleScanStopped,
which may cause time errors in BatteryStats.

Bug: N/A
Test: N/A
Change-Id: Ic022abb88f7482be509fb675ac1517334989bc10
Signed-off-by: Shumao Hou <shumao1129@gmail.com>

As these interfaces get frozen, java services
implementing the interfaces are required to implement getInterfaceHash
and getInterfaceVersion [1]

[1]
https://source.android.com/devices/architecture/aidl/stable-aidl#new-meta-interface-methods

Bug: 190577319
Test: m
Merged-In: I01dda85890dae59082067e4b38c0f50d493cd22d
Change-Id: I01dda85890dae59082067e4b38c0f50d493cd22d