tilion_silverbow

Can the Google Play Store inside the private space install and update apps outside of it?

No.

Like how the Google Play Store on the owner profile can push apps to other profiles and update them, all from that owner profile.

That's not true. Sandboxed Google Play is a regular sandboxed app and cannot do things across profiles. It has nothing to do with how it works on the stock OS where Google Play are privileged OS components with privileged permissions to interact and operate across profiles among many other things. That is certainly not the case on GrapheneOS.

Packages installed across multiple profiles are shared and updating them in one will update them across the others. That's not specific to any particular installer.

      GrapheneOS does updating apps in Owner profile also update apps in private space or is that only between profiles?

          @GrapheneOS Is there any security reason to use different password for private space instead of only screen unlock? It was advised for secondary users.

          Is it possible to use Android Auto in the private space?

            faxe If the apps have the same app id, updating them in one profile updates them in all. Each variant of an app is meant to have a unique app id to avoid signing key conflicts or switching variants if they use the same signing key, etc.

              4nu4b You can use it in a secondary user but it probably won't work in the Private Space right now. You would need to try it and see what happens.

                GrapheneOS Is this issue planned to be worked on whatsoever?
                Just personally pitching in that it would revolutionise the way I use GOS as of now, and that probably most of the isolated owner and work second profile users would as well.

                Thank you for all of the work.

                  I've been using Work (user) profile with GPS and Play store to update the apps installed in both Owner and Work profiles (Owner's had its GPS uninstalled after setting up the untrustworthy apps with no network permission, such as Gboards, Gcam, Speech Recognition & Synthesis, Recorder). Would this be possible in Private Space?

                  Stewart No - only one. See above in the discussion. I thought there will be multiple.

                    Does anybody know if it's possible to lock the private space at given time? All work apps should go to sleep at 18.00. Wakeup in the morning would be more difficult - the unlock requires a password or fingerprint

                    I have Private Space to set only lock on device restart. But I still get prompted with fingerprint unlock almost every time and I try to open an app. Even if I use the app, go to homescreen and then try to re open that app, it asks for fingerprint again.

                    Is that happening to anyone else?

                      DeletedUser124 I have Private Space to set only lock on device restart. But I still get prompted with fingerprint unlock almost every time and I try to open an app. Even if I use the app, go to homescreen and then try to re open that app, it asks for fingerprint again

                      You will have to authenticate with your Private Space credentials the first time you open an app after having locked your device. This is regardless of any settings, and is the same on stock PixelOS. Is this what you're seeing?

                          GrapheneOS We strongly recommend it as a replacement for a work profile managed by a local profile admin app. It has better OS integration and isolation.

                          as someone that has installed GOS on my pixel 8 a month ago but still haven't started using it as my daily driver due to hesitancy in setting it all up properly (profiles, etc.), I wonder what a typical profile set up be for an average user that wants to safely use some google services but keep things private from big social media profiling

                          should I put my gmail app in the private space feature, and maybe make a completely different profile for instagram, and a completely different profile for tiktok? or should I put my google apps like gmail in a profile and use the private space for something else? the options are all a bit confusing and causing me to procrastinate in finally using this phone as I want to set things up properly from the start (currently daily driving an iphone)

                          would be cool if some users did a tutorial of how they set up their profiles and private space as a daily driver, I'd watch that video if someone made it

                              rellhom to be completely honest with you: using services like Instagram, TikTok or GMail really doesn't benefit you in terms of privacy, at all. The first thing I did, is get rid of 95% of these giga-corpos on my phone. The point is, we don't really know how they are tracking us. We can make some good assumptions, but the full extent is hard to know with certainty. I can at least tell you how I set up my profiles for daily use:
                              Owner: all FOSS apps with the exception of GCam and GPhotos, network access removed, no Google Play in that profile.
                              Work profile (set up through Shelter): Google Play is installed, my commonly used closed source apps and FOSS apps I don't trust are in there (Telegram or Apple Music for example). Google Maps and Translate also live in that profile. Permissions are set to a minimum, my location is turned off system wide all of the time, except when I need to use it, e.g. for navigation.
                              Secondary profile: rarely used apps live in there, smart home stuff and shopping stuff like eBay or Amazon. Google Play is installed, but no network permissions, just for compatibility.
                              I haven't set up private space yet, but it will be probably be used to compartementalize my work profile in the near future.

                                fid02 yeah I think that's exactly what's happening. So this is normal behavior, even after changing the private space auto lock option to "only after restart" (rough transition of the setting name because I don't use English on my phone)?

                                    DeletedUser124 I have Private Space to set only lock on device restart. But I still get prompted with fingerprint unlock almost every time and I try to open an app. Even if I use the app, go to homescreen and then try to re open that app, it asks for fingerprint again.

                                    Is that happening to anyone else?

                                    This is because the private space is set to automatically lock itself every 5 minutes by default. Go to private space settings and set "Lock private space automatically" to: "Only after device restarts". You can lock the private space manually at any time. This way is behaves more like a work profile.

                                        DeletedUser131 I already did this, but I still need to unlock the app with fingerprint after locking my device (even if it's just for 1 second) .

                                        The weird thing is I remember it working just fine the first couple of hours.

                                        I already tried restarting the device and toggled between the settings multiple times. :(

                                        Just to clarify: my Private Space UI is not locked (I can see my installed apps in the app drawer). But when I try to open one of the private Space apps, I get prompted to unlock the app with fingerprint every time after locked my device