Hello, recently Samsung introduced auto-locking in OneUI. It also protects the port and has quite a few security features. Is the port protection in Samsung more secure, and is it possible to enable additional features in GrapheneOS as extras?

    Finik auto-locking

    You mean Settings > Security > Device unlock > Cog to the right of Screen lock > Lock after screen timeout ? Or something else?

    It also protects the port

    https://grapheneos.org/features#usb-c-port-and-pogo-pins-control

    has quite a few security features.

    Such as? Sometimes "security features" are merely marketed as such, and don't improve security as much as they're made to seem.

    is it possible to enable additional features in GrapheneOS as extras?

    What features are you looking for?

      Finik
      Oh, so its the "Install unknown apps" permission available in an app's "App info" section. This Samsung feature seems to be a global toggle for that permission (among other things), similar to the "App installs and updates" setting for secondary user profiles that GrapheneOS has.

      I don't think there's a global toggle for the Owner profile however, but its easy to just not give apps the "Install unknown apps" permission in the first place.

      The other features that are part of the Auto Blocker are either already in GrapheneOS (such as the USB port control for blocking USB commands/updates) or seem to require invasion of user's privacy (e.g. blocking malware images, autodownloading attachments, block hyperlinks).

        Graphene does almost all of these out of the box.
        For auto-blocking, the only one I don't think it does is:

        Blocks malware images in messaging apps

        If you mean Maximum Restriction features

        Blocks device admin apps

        You can effectively do this by using a secondary profile as your main one instead of the owner profile

        Blocks hyperlinks and previews

        Nothing exactly like this, but I'd you don't set a default browser then clicking any hyperlink will give you a prompt to select an app to open it, showing you to exit

        Graphene does not include any apps to share photo location data or albums by default, so you would have to deliberately install an app that gives you that ability

        Dumdum That's interesting enough, but I'm not quite sure how the port blocking feature works and what the differences are from Grapheneos