OSDN Git Service

vpn: allow IPSec traffic through Always-on VPN
authorBernie Innocenti <codewiz@google.com>
Mon, 28 May 2018 13:04:37 +0000 (22:04 +0900)
committerBernie Innocenti <codewiz@google.com>
Thu, 28 Jun 2018 07:42:42 +0000 (07:42 +0000)
commitcb8cc6cc5a64b2b313bc6c9308da5991ee293a78
tree9bc33ec7c2c2f07170a225039c31d7368e12c251
parent8b047ec8a218e132c29cf5657fbaf9ba9df586fe
vpn: allow IPSec traffic through Always-on VPN

This won't leak any traffic outside the VPN as long as there are no
processes owned by uid 0 which generate network traffic (which is
currently the case).

Bug: 69873852
Test: compared the output of 'adb shell ip rule show' before and after
Test: runtest -x frameworks/base/tests/net/java/com/android/server/connectivity/VpnTest.java
Test: local CTS tests run: android.net.cts.VpnServiceTest
Test: local CTS tests run: com.android.cts.devicepolicy.MixedDeviceOwnerTest
Change-Id: I8758e576c9d961d73f62bfcf0559dd7ecee6e8e6
Merged-In: I8758e576c9d961d73f62bfcf0559dd7ecee6e8e6
Merged-In: I1f9b78c8f828ec2df7aba71b39d62be0c4db2550
Merged-In: I8edeb0942e661c8385ff0cd3fdb72e6f62a8f218
(cherry picked from commit 00000fe55a4729f8339afdc7eab5c970b2549813)
services/core/java/com/android/server/connectivity/Vpn.java