diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-09-29 16:19:13 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-09-29 16:33:34 -0400 |
| commit | 08deb43b6c2d09c4cab159fe7342ba11ee3b8423 (patch) | |
| tree | 3485ed62b26a14e4d3a3c97779b962a97d406c4b /static | |
| parent | b4777656dfb14b17fc6a7579e7f220f0ad0c00e3 (diff) | |
multicast leak blocking with compatibility improvements
Diffstat (limited to 'static')
| -rw-r--r-- | static/releases.html | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index 22631ecd..10c69215 100644 --- a/static/releases.html +++ b/static/releases.html @@ -880,6 +880,8 @@ <p>Changes since the 2024091900 release:</p> <ul> + <li>extend standard Android eBPF filter to prevent apps sending multicast packets outside of the VPN tunnel either directly or separately via kernel-generated multicast traffic (IGMP, MLD) when leak blocking is enabled (2nd generation implementation with improved app compatibility)</li> + <li>add netfilter-based multicast firewall only permitting sending multicast packets to permitted tunnel interfaces for the process to prevent apps sending multicast packets through a VPN tunnel for another profile (2nd generation implementation with improved IPv6 and app compatibility)</li> <li>Sandboxed Google Play compatibility layer: add stub for Bluetooth AdvertisingSetParameters.setOwnAddressType() API needed for receiving files through Quick Share</li> <li>Sandboxed Google Play compatibility layer: ignore GattServer in BTLeAdvertiser.startAdvertisingSet() needed for receiving files through Quick Share</li> <li>Auditor: add battery optimization exception to help stick with the remote verification schedule despite users rarely ever interacting with the app which results in being placed into semi-restricted standby buckets</li> |