stop exempting VPN app from leak blocking#315

Open

liamsmith827 wants to merge 460 commits intoGrapheneOS:16-qpr2from

liamsmith827:16-qpr2_02-23_protected-sockets

This pull request is big! We're only showing the most recent 250 commits

Commits on Dec 5, 2025

Commits on Dec 6, 2025

Commits on Dec 8, 2025

fixup! perform additional boot-time checks on system package updates

muhomorr
authored and
thestinger
committed
fixup! backend part of 2FA changes

muhomorr
authored and
thestinger
committed
fixup! append "Safe" to risky upstream method names

muhomorr
authored and
thestinger
committed
fixup! add second factor to fingerprint unlock

muhomorr
authored and
thestinger
committed
tests for backend part of 2FA changes

muhomorr
authored and
thestinger
committed
fixup! tests for backend part of 2FA changes

muhomorr
authored and
thestinger
committed
tests for "add second factor UI" change

muhomorr
authored and
thestinger
committed
fixup! tests for "add second factor UI" change

muhomorr
authored and
thestinger
committed
tests for "add second factor to fingerprint unlock" change

muhomorr
authored and
thestinger
committed

Commits on Dec 11, 2025

mark notification summaries & organizer as unsupported by default

authored and
thestinger
committed
force default unsupported notification adjustments

inthewaves
authored and
thestinger
committed

Commits on Dec 12, 2025

fix missing notification backgrounds

bisuhkfurio
authored and
thestinger
committed

Commits on Dec 14, 2025

set initial port security state at an earlier boot stage

muhomorr
authored and
thestinger
committed
Revert "config: enable desktop mode support"

muhomorr
authored and
thestinger
committed

Commits on Dec 17, 2025

add a workaround for WallpaperManagerService.hasPermission() crash

muhomorr
authored and
thestinger
committed
fix system_server crash in NotificationHistory.getPooledStringsToWrite()

muhomorr
authored and
thestinger
committed

Commits on Dec 23, 2025

remove end session button on lockscreen

inthewaves
authored and
thestinger
committed

Commits on Dec 24, 2025

add Process.isMemoryTaggingSupported() system API

muhomorr
authored and
thestinger
committed
Revert "fix DevicePolicyManager#logoutUser to succeed without device admin"

muhomorr
authored and
thestinger
committed
Revert "enable secondary user logout support by default"

muhomorr
authored and
thestinger
committed
SystemUI: enable UserManager logout support

muhomorr
authored and
thestinger
committed
fix system_server crash in NotificationHistoryProtoHelper

muhomorr
authored and
thestinger
committed
fixup! gmscompat: add support for clearing caches of Java binder wrappers

quh4gko8
authored and
thestinger
committed

Commits on Jan 2, 2026

add workaround for KeySetManagerService system_server crash

muhomorr
authored and
thestinger
committed
fixup! infrastructure for spoofing self permission checks

muhomorr
authored and
thestinger
committed

Commits on Jan 7, 2026

disable the upstream USB data protection feature

muhomorr
authored and
thestinger
committed
issue the CHARGING_ONLY_IMMEDIATE port control command in more cases

muhomorr
authored and
thestinger
committed
skip all pseudo kernel crash reports caused by device reboot

muhomorr
authored and
thestinger
committed
add workaround for UsageStatsDatabase OOM system_server crash

muhomorr
authored and
thestinger
committed
add workaround for WindowContext.finalize() system_server crash

muhomorr
authored and
thestinger
committed
gmscompat: narrow down the isNotificationListenerAccessGranted() stub

muhomorr
authored and
thestinger
committed
gmscompat: add MEDIA_CONTENT_CONTROL uses-permission to Android Auto

muhomorr
authored and
thestinger
committed
gmscompat: fix phenotype flags not working in GmsCore clients

muhomorr
authored and
thestinger
committed
Revert "PackageInstallerUI: an option to skip auto-grant of INTERNET permission"

muhomorr
authored and
thestinger
committed
Revert "PackageInstaller: fix crash when showing app's first confirmation prompt"

muhomorr
authored and
thestinger
committed
Revert "PackageInstaller: link "App info" screen from the uninstallation dialog"

muhomorr
authored and
thestinger
committed
add App info link to the app uninstall dialog

muhomorr
authored and
thestinger
committed
add app install dialog checkbox for skipping INTERNET perm pre-grant

muhomorr
authored and
thestinger
committed
use setCanceledOnTouchOutside(false) for app install confirmation dialog

muhomorr
authored and
thestinger
committed
re-enable the system keyboard at boot if it's disabled

muhomorr
authored and
thestinger
committed
switch to the system keyboard when device boots to the safe mode

muhomorr
authored and
thestinger
committed
add "Reboot to safe mode" power menu button in BFU state

muhomorr
authored and
thestinger
committed

Commits on Jan 10, 2026

Commits on Jan 14, 2026

fix an upstream infinite loop bug in ProtoFieldFilter.skipBytes()

muhomorr
authored and
thestinger
committed

Commits on Jan 17, 2026

remove INTERNET uses-permission from Pixel Camera Services

muhomorr
authored and
thestinger
committed

Commits on Jan 23, 2026

update network location setting names

soupslurpr
authored and
thestinger
committed
add Apple China option for network location

soupslurpr
authored and
thestinger
committed

Commits on Jan 24, 2026

Revert "[temporary] make AOSP dialer call notifications not groupable"

inthewaves
authored and
thestinger
committed

Commits on Jan 27, 2026

fixup! notify the user about notable system journal entries

muhomorr
authored and
thestinger
committed
Revert "appop: Save discrete app op history for more permissions"

muhomorr
authored and
thestinger
committed
save discrete app-op history for more permissions

muhomorr
authored and
thestinger
committed
gmscompat: prevent "Device configuration" package auto-install attempts

muhomorr
authored and
thestinger
committed
Revert "add workaround for KeySetManagerService system_server crash"

muhomorr
authored and
thestinger
committed
add workaround for system_server startUserInBackgroundTemporarily crash

muhomorr
authored and
thestinger
committed
fixup! don't report harmless fingerprint-service.goodix crash

muhomorr
authored and
thestinger
committed
FusedLocationProvider: restore pre-16-QPR1 GNSS usage policy

muhomorr
authored and
thestinger
committed

Commits on Jan 28, 2026

match the initial call stack between exec and zygote spawning

muhomorr
authored and
thestinger
committed

Commits on Feb 10, 2026

gmscompat: add option to allow Play services to access ICC auth

inthewaves
authored and
thestinger
committed

Commits on Feb 12, 2026

Revert "SystemUI: change default quick tiles and quick tile order"

muhomorr
authored and
thestinger
committed
SystemUI: replace default quick settings tiles config

muhomorr
authored and
thestinger
committed

Commits on Feb 13, 2026

add Setup Wizard to KnownSystemPackages

soupslurpr
authored and
thestinger
committed
allow Setup Wizard to modify NETWORK_LOCATION setting

soupslurpr
authored and
thestinger
committed

Commits on Feb 16, 2026

fixup! add second factor to fingerprint unlock

liamsmith827
authored and
thestinger
committed

Commits on Feb 23, 2026

update VpnTest command documentation
liamsmith827
committed

Commits on Feb 24, 2026

stop exempting VPN app from leak blocking
liamsmith827
committed