diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-09-17 17:48:17 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-09-17 17:48:17 -0400 |
| commit | ab755b7c503b3f87dab585a9a955101c9497facc (patch) | |
| tree | 14b89c2478c8655c8312d8fbc53f6f1978c93948 | |
| parent | 8f70951a8180a543bba9371f210e943d82512c83 (diff) | |
prevent multicast VPN leaks
| -rw-r--r-- | static/releases.html | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index 5727b42f..85d4f9f7 100644 --- a/static/releases.html +++ b/static/releases.html @@ -880,6 +880,8 @@ <ul> <li>Sandboxed Google Play compatibility layer: handle the updated client dynamite module initialization sequence</li> + <li>extend standard Android eBPF filter to prevent apps sending multicast packets outside of the VPN tunnel either directly or separately via kernel-generated multicast traffic (IGMP, MLD) when leak blocking is enabled</li> + <li>add netfilter-based multicast firewall only permitting sending multicast packets to permitted interfaces for the process</li> <li>exclude com.android.rkpdapp from backup/restore to avoid breaking key provisioning for attestation including for Auditor (users can clear RemoteProvisioner system app data via Settings if they restored data for it and have this issue)</li> <li>Pixel 9 Fold Pro: temporarily manually add overlays from the stock Pixel OS to use the correct layout for quick settings, status bar, etc. and to provide the split folded/unfolded auto-rotate settings</li> <li>hardened_malloc: fix microdroid virtual machine compatibility by using armv8a+dotprod+memtag when enabling memory tagging instead of armv9+memtag</li> |