From d8bb454b71ccaaea923f5d44a8e65a704e968d19 Mon Sep 17 00:00:00 2001
From: fyma85 <248187344+fyma85@users.noreply.github.com>
Date: Sun, 28 Jun 2026 11:32:11 +0800
Subject: [PATCH] AndroidManifest.xml: add INTERACT_ACROSS_USERS permission
 (#788)

Android 17 blocks cross profile loopback network traffic by default. VPN in secondary profiles can no longer simply route everything to the listening port of CMFA in the primary profile; instead a complex config must be individually maintained in each profile.

Adding this permission won't affect existing users as it must be manually enabled via ADB.
---
 app/src/main/AndroidManifest.xml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index c29133e50c..9900007e38 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -17,6 +17,13 @@
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_SPECIAL_USE" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
 
+    <!-- Workaround for Android 17+ cross profile loopback networking restrictions.
+         This permission allows CMFA to connect to loopback addresses and ports bound
+         by the same app running in different profiles.
+         It can only be granted via ADB. -->
+    <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS"
+        tools:ignore="ProtectedPermissions" />
+
     <application
         android:name=".MainApplication"
         android:allowBackup="true"
@@ -219,4 +226,4 @@
             </intent-filter>
         </receiver>
     </application>
-</manifest>
\ No newline at end of file
+</manifest>