commit 83ec7fcb2bcf6ee5a2db62be4d4335e4e4edafeb
author Chad Brubaker <cbrubaker@google.com> Fri Feb 14 13:24:29 2014 -0800
committer Chad Brubaker <cbrubaker@google.com> Fri Feb 21 15:30:02 2014 -0800
tree 3ae29b7d1f76a6541c2726162bb7a2c9ec72b470
parent 170386ea78f749ff60c41ca4e9aa82461d2d3c08

Only allow System apps to make VPN exempt routes

requestRouteToHost will only allow system applications to make routes
exempt from the VPN's routing rules.

If a VPN is currently running and a non-system app requests a route it
will only succeed if that host is currently covered by a VPN exempt
routing rule. Otherwise it will fail.

For example, if a VPN is running and the MMS network is brought online
those routes will be added as VPN exempt. If an application then tries
to request a route to a MMS endpoint it will succeed because the routes
already exist. If an application tries to request a route to a host
covered by the VPN the call will fail.

Bug: 12937545
Change-Id: If7bcec91bbb96c62c8fb69748c975847e6c00b6f