diff --git a/src/main/AndroidManifest.xml b/src/main/AndroidManifest.xml
index 1e251def..0918a916 100644
--- a/src/main/AndroidManifest.xml
+++ b/src/main/AndroidManifest.xml
@@ -131,6 +131,7 @@
                 android:name=".ShadowsocksVpnService"
                 android:process=":bg"
                 android:label="@string/app_name"
+                android:permission="android.permission.BIND_VPN_SERVICE"
                 android:exported="false">
             <intent-filter>
                 <action android:name="android.net.VpnService"/>