[guardian-dev] Webview proxying broken (again) on L/5.0

[Nathan of Guardian]

On Mon, Nov 10, 2014, at 12:29 PM, Rod Hynes wrote:
> On Mon, Nov 10, 2014 at 12:00 PM,
> <guardian-dev-request at lists.mayfirst.org>
> wrote:
> 
> > Date: Mon, 10 Nov 2014 11:25:15 -0500
> > From: Nathan of Guardian <nathan at guardianproject.info>
> > To: guardian-dev at lists.mayfirst.org
> > Subject: [guardian-dev] Webview proxying broken (again) on L/5.0
> > Message-ID:
> >         <1415636715.1612201.189242169.3240BC93 at webmail.messagingengine.com
> > >
> > Content-Type: text/plain
> >
> >
> > Just tested Orweb/Netcipher code on Android L preview roms and the
> > proxying code from KitKat is no longer working on Android L.
> >
> > I am hopeful, as usual, someone can find the right reflection/hidden API
> > call to make this work, but somedays I just wish motherfrackin' Google
> > would make a simple API that worked.
> >
> 
> Hi,
> 
> Psiphon has shipped an update with this fix for proxying WebView on
> Lollipop:
> 
> https://bitbucket.org/psiphon/psiphon-circumvention-system/src/2b54f44afe2ba089dee1d72887ec3d694ce4462e/Android/PsiphonAndroidLibrary/src/com/psiphon3/psiphonlibrary/WebViewProxySettings.java?at=default#cl-216

You guys are always on top of this. Thanks for sharing!

> 
> BTW, we disabled our root/iptables mode on Lollipop due to the uncertain
> SELinux requirements (http://su.chainfire.eu/#selinux). Last time I
> looked,
> it wasn't clear what sort of SELinux config rooted devices will end up
> with
> (https://plus.google.com/+Chainfire/posts/VxjfYJnZAXP). Do you have any
> further insights about this?

I haven't even begun looking to root on L. 

> Our VpnService mode works fine, with some minor tweaks for Lollipop.

I will be digging back into that soon, as our hope is to turn all
root/iptables functionality over to Orwall soon, and only offer SOCKS
and VpnService in Orbot core.

+n

-- 
  Nathan of Guardian
  nathan at guardianproject.info