init.rc: allow IPPROTO_ICMP support

Allow userspace programs to create IPPROTO_ICMP sockets.

This socket type allows an unprivileged program to safely
send ICMP_ECHO messages and receive the corresponding
ICMP_ECHOREPLY messages, without relying on raw sockets or
setuid programs.

Please see for details.

In particular, this allows us to use a version of ping
which doesn't have any capabilities
In addition, this allows us to safely implement an IPv4 ICMP
based version of InetAddress.isReachable()

Change-Id: I876718151efa8219c4f34f573e35e21256fe2316
1 file changed