Second profile questions regarding vulnerability / useage / session

Protonuser

Hey, just noticed that even when rebooting from second profile, when signing back in, the apps are still in the background / tasker. Would this be something that can be looked at in future updates where auto reboot / restarting phone will "end session" for secondary profiles?

Does that mean that if an attacker were able to exploit the fastboot and able to perform a ramdump, if the second profile session was ended, nothing could be attained. But if the second profile was just switched to main profile or rebooted but the session was not ended via the lockscreen button, that it could also be compromised in this way?

other8026

Protonuser If I understand the question correctly, all data is put to rest when the phone is rebooted, including secondary profiles' data.

VenomBow

So i created a main profile without sandbox programs, then i added a second profile with it. then put youtube on the sandbox profile and it works fine. went back to the one without the google programs, downloaded youtube and it wont open. i dont believe theyre running or im not understandin you

Flatty

Similar question: if I end the session of user profile (profile A), once there are some apps opened and running in the background, then log in to the same profile (profile A) (or log in to another profile (profile B) first and then log in again to the mentioned one (profile A)) then all apps opened before ending the session are still opened. Based on below description from GOS website, I understand that everything running at profile A, should go off after ending the session of profile A, same as I would off the phone. However looks like there are still some stuffs running in the memory.

_"End session

GrapheneOS also enables support for logging out of user profiles without needing a device manager controlling the device to use this feature. Logging out makes profiles inactive so none of the apps installed in them can run. It also purges the disk encryption keys from memory and hardware registers, putting the user profile back at rest."_

Please explain what End Session function offs inside user profile and what remain on?

de0u

Flatty if I end the session of user profile (profile A), once there are some apps opened and running in the background, then log in to the same profile (profile A) (or log in to another profile (profile B) first and then log in again to the mentioned one (profile A)) then all apps opened before ending the session are still opened.

They may be opened again, but that does not mean they were running in between.

Android apps can be suspended by the OS if it is low on memory or power, and are expected to restore themselves automatically to their previous state when restarted.

If a profile is completely stopped, and restarted, it is not surprising for the apps to resume where they had left off.