Revert "fix DNS leak in VPN lockdown mode when VPN is down"

This reverts commit 2710991.
GrapheneOS · May 12, 2024 · 296ccdc · 296ccdc
1 parent 2710991
commit 296ccdc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/NetworkController.cpp b/server/NetworkController.cpp
@@ -209,8 +209,8 @@ int NetworkController::setDefaultNetwork(unsigned netId) {
 
 uint32_t NetworkController::getNetworkForDnsLocked(unsigned* netId, uid_t uid) const {
  Fwmark fwmark;
- fwmark.protectedFromVpn = canProtectLocked(uid);
- fwmark.permission = getPermissionForUserLocked(uid);
+ fwmark.protectedFromVpn = true;
+ fwmark.permission = PERMISSION_SYSTEM;
 
  Network* appDefaultNetwork = getPhysicalOrUnreachableNetworkForUserLocked(uid);
  unsigned defaultNetId = appDefaultNetwork ? appDefaultNetwork->getNetId() : mDefaultNetId;