[strongSwan] strongswan on Android devices

[Nitin Verma]

Hi Tobias,
Thanks a lot for your quick reply.
My ultimate concern is how to start the ipsec from the Android shell as a
non root user (i.e. user=shell, group=shell). How can I achieve this by
modifying the Android.mk? As in Makefile I can give "ipsec_user = shell"
and "ipsec_group = shell", can I give the same in Android.mk?

Regards,
Nitin

On Tue, Apr 17, 2012 at 4:37 PM, Tobias Brunner <tobias at strongswan.org>wrote:

> Hi Nitin,
>
> > I am trying to run strongswan on Nexus S running 4.0-3. Is their any way
> > to run strongswan in non-su mode? I read that during
> > ./configure, --with-user=<user_name> --with-group=<group_name> options
> > gives such flexibility on Linux. But how to achieve the same on Linux?
> > Any idea?
>
> This is already the case by default in the Android build.  After
> starting up as root the daemons will switch to user 'vpn' (which is
> predefined on Android) and drop unnecessary capabilities (the same as
> when compiled with ./configure --with-capabilities=native on Linux).
>
> Regards,
> Tobias
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120417/de0a6037/attachment.html>