Normal that graphene Apps doesn't have the "Install unknown apps" permission?

monero4freedom

I just noticed that the "Apps" app of grapheneOS doesn't have "Install unknown apps" permission enabled, yet, we rely on it to have the updates and install google play services. Is this normal? I would expect that app to have that permission in order to be able to do these.

Dumdum

monero4freedom

monero4freedom I would expect that app to have that permission in order to be able to do these.

No? "Unknown apps" are apps that aren't included within the app itself. Since Apps is only for GOS apps and GPlay / Android Auto, it doesn't need permission to install other apps.

other8026

monero4freedom Assuming this file is added to the OS, it's already allowed. Maybe the Settings app just doesn't know how to check if an app has been allowlisted this way.

matchboxbananasynergy

monero4freedom "Apps" app when installed on GrapheneOS doesn't need that to be able to install apps, as it's the system app store and uses the privileged permissions for installing apps.

If you install "Apps" outside of GrapheneOS, you'll need to enable that, as with any other third-party app store.

SIGSEGV

matchboxbananasynergy I wanted to add to this discussion that "Files" system app also is able to install arbitrary apks, which I very much want to disable.
Also Vanadium is a system app as well, and i definitely don't want it to be able to install apks

dhhdjbd

SIGSEGV

neither files nor vanadium are allowed to install apks, if you dont give it the permission.

I think they just ment, that the app store has a special permission. If installing apps is disabled in a user profil for example, the app store cant install apps either.

(it still can in private spaces tho, because the 'no install' user setting does not work in private spaces yet, if there wasnt a change lately)

SIGSEGV

dhhdjbd but that's what i'm saying - "files" can install apks, i just accidentally discovered it on a brand new GOS installation. And I don't know how to disable that. the "Install unknown apps" permission is not allowed for it, just like it is for "Apps" app

dhhdjbd

SIGSEGV

Oh you are right sry, i just tested it.

-Downloaded signal apk

Files has permission not to install apps from unknown sources
open with package installer
no "not allowed go to settings prompt"

If i

go to vanadium downloads
open apk with package installer
"apks are not allowed to be installed from this source change in settings.. prompt"

i am pretty sure files should have shown the same prompt, and that it did show it in the past?

so not sure if this is an issue/ bug or not. But i guess it is