commit 1a2c5e916d91b6efe0d57595b7b783dfdc15ad7d
author Robin Lee <rgl@google.com> Fri Mar 10 16:07:39 2017 +0000
committer Robin Lee <rgl@google.com> Fri Mar 17 13:12:08 2017 +0000
tree 9464345e2ff860e2c6c6dbe18ca9012e57540cc2
parent fcef899dfa8a801cce07701d84bece9294e201cf

Use NetdClient to exempt racoon sockets from VPN

So that if we create a networkRejectNonSecureVpn rule, racoon doesn't
get its connection shut down.

This means we can drop the special-cased firewall code for racoon from
Android, and just use the same set of VPN ip rules as for third-party
apps.

Later on it might be possible to protect the socket without depending
on libnetd_client, see bug 34524989

Test: manual - enable always-on VPN with a legacy Ipsec PSK VPN on 464xlat network
Bug: 33159037
Change-Id: I89740d110cff8e67eb661b0b3d191eb49aa1e9d8