summaryrefslogtreecommitdiffstats
path: root/rootdir
diff options
context:
space:
mode:
authorChia-chi Yeh <chiachi@android.com>2011-07-10 16:16:06 -0700
committerAndroid (Google) Code Review <android-gerrit@google.com>2011-07-10 16:16:06 -0700
commit56286d6fdb07d8b1310c27eeb59bdf05500f166e (patch)
treeaf6fd63d062391bef75b4f3f0773f2a929890667 /rootdir
parent1ac6ddeba6873e44b49610ca1f272186f5318f8e (diff)
parent9bb4d411e01c8e6330b5c27c489485592360576b (diff)
downloadsystem_core-56286d6fdb07d8b1310c27eeb59bdf05500f166e.zip
system_core-56286d6fdb07d8b1310c27eeb59bdf05500f166e.tar.gz
system_core-56286d6fdb07d8b1310c27eeb59bdf05500f166e.tar.bz2
Merge "init: update permissions for VPN."
Diffstat (limited to 'rootdir')
-rw-r--r--rootdir/init.rc7
1 files changed, 3 insertions, 4 deletions
diff --git a/rootdir/init.rc b/rootdir/init.rc
index d9ac7a4..8dd858f 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -144,9 +144,8 @@ on post-fs-data
mkdir /data/misc/bluetooth 0770 system system
mkdir /data/misc/keystore 0700 keystore keystore
mkdir /data/misc/keychain 0771 system system
- mkdir /data/misc/vpn 0770 system system
+ mkdir /data/misc/vpn 0770 system vpn
mkdir /data/misc/systemkeys 0700 system system
- mkdir /data/misc/vpn/profiles 0770 system system
# give system access to wpa_supplicant.conf for backup and restore
mkdir /data/misc/wifi 0770 wifi wifi
chmod 0660 /data/misc/wifi/wpa_supplicant.conf
@@ -462,8 +461,8 @@ service flash_recovery /system/etc/install-recovery.sh
service racoon /system/bin/racoon
class main
socket racoon stream 600 system system
- # racoon will setuid to vpn after getting necessary resources.
- group net_admin
+ # IKE uses UDP port 500. Racoon will setuid to vpn after binding the port.
+ group vpn net_admin
disabled
oneshot