From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 16 Jul 2014 14:20:00 +0000 (+0200)
Subject: android: Only allow DNS queries for the configured hostname
X-Git-Tag: 5.2.1dr1~115^2~2
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=945832c67d139a2a7a3006c0b97894b78ee9caf9;p=thirdparty%2Fstrongswan.git

android: Only allow DNS queries for the configured hostname
---

diff --git a/src/frontends/android/jni/libandroidbridge/backend/android_service.c b/src/frontends/android/jni/libandroidbridge/backend/android_service.c
index 73738c22ed..fb8f93311e 100644
--- a/src/frontends/android/jni/libandroidbridge/backend/android_service.c
+++ b/src/frontends/android/jni/libandroidbridge/backend/android_service.c
@@ -749,6 +749,8 @@ android_service_t *android_service_create(android_creds_t *creds, char *type,
 		.type = type,
 		.tunfd = -1,
 	);
+	/* only allow queries for the VPN gateway */
+	this->dns_proxy->add_hostname(this->dns_proxy, gateway);
 
 	charon->bus->add_listener(charon->bus, &this->public.listener);