Incorrect VPN lockdown documentation [249990229]

Assigned

Bug

[AOSP] assigned

Status Update

No update yet.

Description

al...@mullvad.net

created issue #1

Sep 30, 2022 02:50PM

The documentation regarding "Block connections without VPN" (from now on lockdown) is incorrect, as connectivity check traffic intentionally leaks (sent outside the VPN tunnel) while establishing network connectivity, even though lockdown is activated for a VPN app.

Current documentation:

A person using the device (or an IT admin) can force all traffic to use the VPN. The system blocks any network traffic that doesn't use the VPN. People using the device can find the Block connections without VPN switch in the VPN options panel in Settings.

Comments

vi...@google.com <vi...@google.com> #2Sep 30, 2022 11:58PM

We have passed this to the development team and will update this issue with more information as it becomes available.

sa...@google.com <sa...@google.com> Oct 3, 2022 03:47AM

Assigned to vi...@google.com.

al...@mullvad.net <al...@mullvad.net> #3Oct 3, 2022 09:53AM

This also affects payment apps that start activity from HCE service when user taps the phone on NFC terminal, like our company's Wave2Pay or even your own Google Pay.

al...@mullvad.net <al...@mullvad.net> #4Oct 3, 2022 01:13PM

Please don't harm automation apps, at least allow foreground services : this is affect a lot of app (include mine, Tasker, MacroDroid, ...)
You take down SMS & Call Log permissions, now you take down all entire automation apps.

This will ruin a lot of apps, and developers life...
Please reconsider your decision or propose an alternative !

al...@mullvad.net <al...@mullvad.net> #5Oct 7, 2022 02:02PM

Comment has been deleted.

Message last modified on Oct 7, 2022 02:07PM

da...@gmail.com <da...@gmail.com> #6Oct 24, 2022 11:07PM

I agree with the author. See also:

https://issuetracker.google.com/issues/128511873

mo...@gmail.com <mo...@gmail.com> #7May 4, 2024 03:07PM

Google should be supporting and encouraging automation app developers and users, not limiting us!