tree 2481f5bc16d56055899c91135e08471acba543fb
parent 36522e885479b30bc49a8a7333f436d5744431bc
author Robin Lee <rgl@google.com> 1463755448 +0100
committer Victor Chang <vichang@google.com> 1464777152 +0100

Disable restricted VPN actions onResume

Otherwise it's pretty easy to circumvent any future restrictions by
keeping VPN settings for a particular app open and continuing to use
it even after DISALLOW_CONFIG_VPN is applied.

Two checks:
 1) in onResume (catches almost every case)
 2) in setAlwaysOn (catches every remaining case)

Bug: 28733079
Change-Id: I1c67bb14891ef620df5ed65fbd32678e417b4a65