EthACKdotOrg / orWall

Put your apps behind Orbot, and block all unwanted traffic in one row.
https://orwall.org/
GNU General Public License v3.0
85 stars 26 forks source link

UID mismatch #128

Open JeremyRand opened 6 years ago

JeremyRand commented 6 years ago

I noticed that DAVdroid couldn't access the network regardless of Orwall's rules for DAVdroid (even if I rebooted the device and disabled/enabled DAVdroid in Orwall). I then did the following experiment:

iptables -L | grep davdroid

This showed a rule that said owner UID match u0_a67 /* Allow at.bitfire.davdroid to connect on localhost */

ls -n /data/data/at.bitfire.davdroid

This showed that the owner UID was 10043, not 10067.

This mismatch isn't the case for my other apps, which work fine with Orwall. I've reinstalled DAVdroid multiple times since installing Orwall (and I believe it stopped working after one of the reinstalls). However, I'm unable to reproduce this mismatch by reinstalling other apps.

Is Orwall possibly trying to cache the UID of apps, and maybe this cache sometimes desyncs from reality?