tree 6363eb5be1186d37a09742b9d43bf71796f3a144
parent 14aabea07c3213715a37c4f437dfa7c8991cee83
author Chalard Jean <jchalard@google.com> 1559206104 -0700
committer Lorenzo Colitti <lorenzo@google.com> 1559206475 +0000

Always give VPN the INTERNET capability.

Split-tunnel VPN (which are the only ones affected by this change)
always fall through to the default network for routes they don't
handle, and even if the underlying network(s) don't provide access
this may be a pinhole that can actually reach the broader network.

In practice this behaves like the original release of P and is the
safest thing to do for Q. In R we should evaluate giving the VPN
app the ability to simply tell the network stack whether it does
provide Internet access or not.

Bug: 119216095
Test: FrameworksNetTests NetworkStackTests
Change-Id: I262ca41fe0225660551c9a421562405366b6acac
Merged-In: I262ca41fe0225660551c9a421562405366b6acac
(cherry picked from commit 6d5a4a3b1d1c69eb8a542fecf5e8a306822c19b7)