From 8480078f8f0fa6971bf3aeffc64566cd66b4aa3b Mon Sep 17 00:00:00 2001
From: fyma85 <248187344+fyma85@users.noreply.github.com>
Date: Sun, 28 Jun 2026 09:04:04 +0800
Subject: [PATCH 1/2] AndroidManifest.xml: add INTERACT_ACROSS_USERS permission

Android 17 blocks cross profile loopback network traffic by default. VPN in secondary profiles can no longer simply route everything to the listening port of CMFA in the primary profile; instead a complex config must be individually maintained in each profile.

Per VentralDigital/InterProfileSharing#34, the `INTERACT_ACROSS_USERS` permission, when manually granted with ADB, allows cross profile traffic at least for the same app.

Adding this permission won't affect existing users as it must be manually enabled via ADB.
---
 app/src/main/AndroidManifest.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index c29133e50c..f84e2818fc 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -16,6 +16,8 @@
         tools:ignore="QueryAllPackagesPermission" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_SPECIAL_USE" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
+    <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS"
+        tools:ignore="ProtectedPermissions" />
 
     <application
         android:name=".MainApplication"
@@ -219,4 +221,4 @@
             </intent-filter>
         </receiver>
     </application>
-</manifest>
\ No newline at end of file
+</manifest>

From 1e3728b3db40f8888f5b62daf2b25354af934921 Mon Sep 17 00:00:00 2001
From: fyma85 <248187344+fyma85@users.noreply.github.com>
Date: Sun, 28 Jun 2026 10:52:59 +0800
Subject: [PATCH 2/2] AndroidManifest.xml: add brief description to
 INTERACT_ACROSS_USERS

---
 app/src/main/AndroidManifest.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index f84e2818fc..9900007e38 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -16,6 +16,11 @@
         tools:ignore="QueryAllPackagesPermission" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_SPECIAL_USE" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
+
+    <!-- Workaround for Android 17+ cross profile loopback networking restrictions.
+         This permission allows CMFA to connect to loopback addresses and ports bound
+         by the same app running in different profiles.
+         It can only be granted via ADB. -->
     <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS"
         tools:ignore="ProtectedPermissions" />