From 2265824f16ff5e2b94e9557a50e9dc01d645962a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kalle=20Lindstr=C3=B6m?= <karl.lindstrom@mullvad.net>
Date: Wed, 16 Oct 2024 12:50:26 +0200
Subject: [PATCH] Set mullvad vpn service exported to false

---
 android/app/src/main/AndroidManifest.xml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index 443f8d631d92..dd660cda4ba3 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -61,18 +61,12 @@
                 <action android:name="net.mullvad.mullvadvpn.request_vpn_permission" />
             </intent-filter>
         </activity>
-        <!--
-            MullvadVpnService
-            It's unclear in the documentation whether the service must/should be exported or not,
-            however as it's protected by the bind vpn permission
-            (android.permission.BIND_VPN_SERVICE) it's protected against third party apps/services.
-        -->
         <!--
             foregroundServiceType="systemExempted" is required in Android 14+
             https://developer.android.com/guide/components/fg-service-types#system-exempted
             -->
         <service android:name="net.mullvad.mullvadvpn.service.MullvadVpnService"
-                 android:exported="true"
+                 android:exported="false"
                  android:foregroundServiceType="systemExempted"
                  android:permission="android.permission.BIND_VPN_SERVICE"
                  android:stopWithTask="false"