How can secondary profiles detect that the main profile uses a vpn?

TracaChang

I do use a VPN for the main profile.

When I log to a secondary profile (a profile for banking) and I open the banking app, I do get an alert message that I am using a VPN and I must disconnect it in order to use the app.

In the secondary profile there's no VPN installed, I search VPN in settings and says "none" and when I check my ip, I do get my real IP. As soon as I go to the main profile and disconnect the VPN I am able to use the banking app.

How this secondary profile is able to know that the main has a vpn even if it is not being used?

Thank you.

de0u

TracaChang How this secondary profile is able to know that the main has a vpn even if it is not being used?

Maybe it's enumerating the network interfaces looking for tunnels?

akc3n

TracaChang How this secondary profile is able to know that the main has a vpn even if it is not being used?

How did you install the banking app? Was it from the sandboxed play store that was setup in said secondary profile? How did you install the VPN app? What permissions did you give it?

TracaChang

de0u
I do not know and I am not sure how I could test this.

akc3n
Yes, the banking app has been installed in a secondary from the sandboxed play store. The permissions allowed are: Network, Notifications and Sensors.

The VPN in the main profile (no sandboxed play store) has been installed from the apk (downloaded from the website of the vpn company) and the permissions allowed are: Network, Notifications and Sensors.

TracaChang

I have disconnected the commercial VPN and turned on Orbot (which is not even being used globally, but just for a few apps) in the secondary profile I do still get the same alert when opening the banking app.

Orbot (which is only in the main profile) has been installed from F-droid.

PaulDavis

WiFi or phone data ?

TracaChang

PaulDavis both

Carlos-Anso

See
https://discuss.grapheneos.org/d/13667-hide-vpn-from-apps-not-routing-through-it/7

TracaChang

Carlos-Anso I have tried setting a private dns as you suggest but same result, the banking application of the secondary profile still detects that the main profile has a vpn.