[strongSwan] strongswan on Android devices

Nitin Verma nitin.jndm at gmail.com
Tue Apr 17 17:00:47 CEST 2012

Hi Tobias,
Thanks a lot for your quick reply.
My ultimate concern is how to start the ipsec from the Android shell as a
non root user (i.e. user=shell, group=shell). How can I achieve this by
modifying the Android.mk? As in Makefile I can give "ipsec_user = shell"
and "ipsec_group = shell", can I give the same in Android.mk?


On Tue, Apr 17, 2012 at 4:37 PM, Tobias Brunner <tobias at strongswan.org>wrote:

> Hi Nitin,
> > I am trying to run strongswan on Nexus S running 4.0-3. Is their any way
> > to run strongswan in non-su mode? I read that during
> > ./configure, --with-user=<user_name> --with-group=<group_name> options
> > gives such flexibility on Linux. But how to achieve the same on Linux?
> > Any idea?
> This is already the case by default in the Android build.  After
> starting up as root the daemons will switch to user 'vpn' (which is
> predefined on Android) and drop unnecessary capabilities (the same as
> when compiled with ./configure --with-capabilities=native on Linux).
> Regards,
> Tobias
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120417/de0a6037/attachment.html>

More information about the Users mailing list