4 ms·
> Blocking UID 1000 connections, and blocking QUIC, has not caused any problems for me By design, the app sandbox isn't applied as strictly on "privileged apps
by ignoramous 5mo ago
> Blocking UID 1000 connections, and blocking QUIC, has not caused any problems for me
By design, the app sandbox isn't applied as strictly on "privileged apps" (like UID 1000). There's nothing NetGuard or any userspace app can do to shore that up. System/privileged apps can bypass most OS-enforced isolation mechanisms at will: https://github.com/celzero/rethink-app/issues/224 https://github.com/celzero/rethink-app/issues/224
This is besides the fact that NetGuard doesn't (yet) support "Block connections without VPN" mode.