Multiple users and wifi

bootloader

I know I could 'just test it', but if anyone knows:

If in user 1 I enable wifi and join to a network, then switch to user 2, is wifi will be enabled there as well? Will user 2 be also automatically joined to the same network, or in every profile I have to connect independently? Can I stay offline with no wifi enabled in user 2, while in user 1 joining to a wifi access point?

other8026

bootloader some network settings are "global," including wifi. So, yes, if you're connected to wifi in one profile, you'll be connected to the same wifi with the same IP address in another profile.

bootloader

other8026

gk7ncklxlts99w1 Thanks for your replies!

That's not so convenient I think. If the network settings are global but the VPN is per profile (and if you are using many profiles, like me), then it makes things very complicated. I don't know if this is a realistic wish, but if I imagine GOS with the capability to choose between a default global VPN / optional setups per profile as well (or per profile WiFi connections), I think that would be really powerful.

gk7ncklxlts99w1

I asked the same question here: https://discuss.grapheneos.org/d/13410-how-do-i-prevent-profiles-from-automatically-using-wifi-and-bluetooth. Best solution is to put a firewall or VPN on the second profile (what you're referring to as "user") and block all connections. I recommend RethinkDNS. Airplane mode also works but sometimes it doesn't actually disconnect you from wifi.

gk7ncklxlts99w1

bootloader I agree. I don't want WiFi or bluetooth on a certain profile and it's inconvenient and I usually forget. I also would rather not increase attack surface by installing a Firewall or VPN app in there.

bootloader

Although the different alternative solutions what you, and people in other thread wrote is really useful. Thanks again!

GlytchMeister

gk7ncklxlts99w1

I think RethinkDNS has a way to block all network connections when the “phone” is locked

Because each GOS profile is more or less an independent phone (barring a few critical bits and bobs), I think this means you can set RDNS to effectively kill wifi when you switch away from a certain profile.

I’m currently setting up a “work” GOS profile that needs a bunch of Google and Microsoft crap, and if I can make it work, this will be my solution.

Non-global wifi and Bluetooth settings would be really nice, tho.