ivpn
Multiple User Accounts cause Unintended Connection Issues
edit: Perhaps I should have classified this as a security bug since you can by-pass the phones built in kill switch.
Bug report
Describe your environment
- Device: Moto G4 Plus
- OS name and version: Android 9 , OmniRom
- IVPN app version: 2.6.0 (From Fdroid Store)
- Two user accounts on the phone
Describe the problem
The state of IVPN on one user account affects all accounts. If the internet is running on one user account through IVPN then both user accounts have internet from that app. Even if the IVPN app on the other user account is off and the phone built in kill switch is enabled. Internet from one IVPN app on one user account can completely by-pass the phones built in kill switch on the other user account.
This same problem occurs with the apps built in kill switch. If the IVPN kill switch is on for one user account and IVPN is disconnected so that it is engaged; then all user accounts have their internet disabled.
Steps to reproduce:
- Set up the IVPN app and make sure the phone's always on VPN and kill switch settings are enabled. (not the IVPN kill switch)
- Connect the internet on one app in one user account
- Go to another user account and do the same setup. The only exception is you have the VPN turned off on this user account.
- Your see that you have internet even though the phone's kill switch is enabled and the IVPN app for that user account is off.
Now for the Kill switch test:
- Turn on the IVPN app kill switch for one user account
- Turn off IVPN connection
- Turn on the internet with the IVPN app on another user account
- Notice you don't have have internet because the previous user account has its IVPN kill switch enabled.
Observed Results:
- What happened? This could be a description, log output, etc.
Having internet from the IVPN app or having the kill switch on for the IVPN app affects all users.
Expected Results:
- What did you expect to happen?
The IVPN app should only affect the user account it is on.
