[strongSwan] strongswan on Android devices

Tobias Brunner tobias at strongswan.org
Tue Apr 17 17:12:37 CEST 2012


Hi Nitin,

> My ultimate concern is how to start the ipsec from the Android shell as
> a non root user.

That's not possible the daemon needs root permission initially to open
the netlink/xfrm sockets.  Only afterwards can it switch the user ID to
a non root user.  This is true for Linux too, setting the user ID in the
Makefile or via ./configure does not change this.

Regards,
Tobias




More information about the Users mailing list