com.google.android.networkstack Copy

The Android Network Stack, a Google-signed Project Mainline module rather than an ordinary app. It contains the lower-level networking logic that used to live inside the framework: IpClient (IP-layer provisioning), DhcpClient (obtaining addresses from DHCP servers) and NetworkMonitor, which tests whether a newly joined network actually reaches the internet, detects captive portals and validates connectivity. On a Google Mobile Services device this is signed by Google and named com.google.android.networkstack; on a device built with AOSP keys the equivalent is com.android.networkstack. Version note: networking was moved out of the framework into this updatable module with Project Mainline, which Google introduced in Android 10. From Android 10 onward it is delivered and patched through Google Play system updates instead of full OS releases, so its version can move independently of the platform build. That is why it appears as a separate package with its own update cadence rather than as part of the base system image. For Android Enterprise, EMM and kiosk use it is core connectivity infrastructure, not optional software. It plays no part in enrolment or policy, but every Wi-Fi and mobile-data connection depends on it for IP setup and the "is there internet" check, so disabling or removing it breaks network validation and connectivity. Leave it in place. If a kiosk needs to pass a captive-portal sign-in, allowlist the captive-portal login app rather than touching the network stack.

• Network Stack - Android Open Source Project →
• Mainline - Android Open Source Project →

• Signed by Google's own signing key (the same key Google uses across devices), so it is a Google-provided preinstall that updates independently of the system image, though 2 different Google signing keys appear across the fleet. This certificate spans 16 device makes - the hallmark of a globally distributed Google key.
• Its largest observed manifest declares 15 permissions: 2 runtime (user-granted), 6 signature or system-level, 4 install-time and 3 vendor or uncatalogued.
• Reported as an updated system app on 42 of 48 profiles - a newer build is installed over the one in the system image there.