• Edited

yore I can share with you my use case, I chose a second user profile for GPS with Android Auto rather than private space, only because I don't know whether or not Android Auto could shut down if private space ever locks, imagine yourself driving, you don't want that to happen, but you know what, I'd experiment to get the answer.

Hi there , would that be possible to add a shortcut to the main '""desktop" apps from private scope?
That would make sens because if people want to use some apps that they use daily and they are installed from play store.

Xtreix

That sounds like a great config and likely the path I will take. Do you leave the private space running at all times?

My thought was to put in something like google play services, google voice, gmail, and perhaps other privacy invasive apps in the private space but I would want to be notified if I get calls on my google voice in real time and be able to answer those calls even when I'm in my main profile.

    treenutz68

    If you want to receive calls, you may wish to leave it unlocked. You will not be able to receive Google Voice calls nor other notifications from a locked profile.

    treenutz68 Do you leave the private space running at all times?

    No, only when I use it

    treenutz68 I would want to be notified if I get calls on my google voice in real time and be able to answer those calls even when I'm in my main profile.

    I think it's possible, go to settings > security and privacy > private space > lock private space automatically on "only after device restarts" so private space will stay on if you lock the screen.

    Am wondering if Private Space apps are accessible from the GOS launcher? I heard 3rd party launchers have an issue.

      I can't launch it with Niagara Launcher, it's causing problems, I can't activate the private space, too bad, I'm still waiting for a fix.

      GrapheneOS Do I understand correctly, that locking the private space is an equivalent of stopping a user profile? This means that after locking, apps in private space won't run and receive notifications? So if I'd use Play Services on both, the only benefit would be a separate VPN, right? It doesn't make sense to use it to add extra protection for some critical apps, like e-mail, banking, gov id, etc.?

        • Edited

        dext Do I understand correctly, that locking the private space is an equivalent of stopping a user profile? This means that after locking, apps in private space won't run and receive notifications?

        That's correct.

        dext So if I'd use Play Services on both, the only benefit would be a separate VPN, right? It doesn't make sense to use it to add extra protection for some critical apps, like e-mail, banking, gov id, etc.?

        You can use it for its two use cases, 2 separate VPNs and sensitive applications in Private Space, it's also useful for users who don't want to install Google play services in the main profile, even though it runs completely sandboxed with no privileged access in GrapheneOS.

        Private space is a more powerful and efficiant workspace, it doesn't require a third-party application and isolation is much more robust.

        Is it possible to have several Private Spaces in the same profile, the main one?

          Is Private Space limited to the default launcher, or is there a way to access from a custom launcher?

            What is the process of installing the same app in both owner and private space, to avoid signature/versioning conflict? I dont see an "Install available apps"-feature like in theuser profile management menu.

              A few questions

              Will there be a way to sync apps or update them locally, how Shelter allows with the work profile?

              Will private space apps be possible to be placed on the home screen?

              If there will be a permissions to lock syncing the clipboard, what is the difference to a work profile here? Would this work here too?

              Couldnt the work profile be used just like the private space, without needing to fully trust a 3rd party, possibly outdated app?.

              In some 15 alpha versions there was a context menu for adding apps to the private space. This is now gone. Was this a bug, will it be added back?

                Hawk_Tuah is it maybe installed in other profiles? You have to uninstall it from all of them.

                  privsec

                  privsec what about apps who ask for phone permission?

                  most likely they also will not work. Without phone permissions and SMS permissions, banking apps are rendered useless in Private Space. Also, those applications which required offline database are also problem on Private Space as I cannot use cable for data transfer from my PC. Syncing over the network is alternative. But, transfer of 50-60 GBs files on the wifi seems too slow, plus deleting private space will delete offline data and will have to repeat it from scratch.
                  I liked the feature and idea of accessing the apps which i had to store on another profile from Owner profile itself, but ig i will have to continue to install separate user profiles for my needs.

                  Can apps in Private Space know what apps I have in the owner profile, or vice versa?

                    fxnn is there another way to install apps into private space from personal space?

                    matchboxbananasynergy Simply install the app stores you want in the private space and install the apps as you would normally.

                    TrustExecutor What is the process of installing the same app in both owner and private space, to avoid signature/versioning conflict? I dont see an "Install available apps"-feature like in theuser profile management menu.

                    missing-root Will there be a way to sync apps or update them locally, how Shelter allows with the work profile?

                    As of now, it doesn't seem possible to set up a Private Space in a manner that doesn't put any trust in the local network - you cannot move your VPN app there in the same way as you can do it for separate profiles from Owner. You would need to use Vanadium inside Private Space to download an APK.

                    Note for high threat models: Vanadium (and other apps in Private Space) might ping GOS' servers directly as PS has its own VPN slot. Bear that in mind if your threat model includes ISP not knowing that you use GOS.

                    I think I tried every possible method to see if it's technically possible. Files app inside PS is not capable of viewing a usb stick.

                    The closest I got to installing an app from Owner to Private Space: have .APK downloaded in Owner > go to Files > long press the file > tap on three dots > open with > Private > Installer (inside PS). Selecting it doesn't do anything. Might be a bug. It would be a decent workaround.

                      • Edited

                      @GrapheneOS Maybe dumb question: apps inside the Private Space can’t see what other apps are installed in the main profile right? Like it is in user profiles?