vpn: add support for spawning VPN client programs in minijail
Spawn VPN programs in a minijail if the --jail-vpn-clients command line
flag is passed. Also update unit tests.
Also make the openvpn config dir/file world-readable so it can be created
by shill user and accessed by openvpn user. If we think this file is
sensitive and shouldn't be world-readable then we could alternatively
make shill user belong to openvpn group and have shill chgrp() on the
file to openvpn. I didn't do that here for sake of simplicity but will
make that accomodation if anyone feels strongly about this.
TEST=unit tests pass, tested as part of larger sandbox shill debug CL
Commit-Ready: Micah Morton <email@example.com>
Tested-by: Micah Morton <firstname.lastname@example.org>
Reviewed-by: Micah Morton <email@example.com>
7 files changed