How would GrapheneOS work in highly sensitive / security conscious environments

oci3o

Hi all,

So I was thinking recently about GOS but in a sensitive environment.
I was thinking this because I am currently doing some security work which will eventually be involved in highly secure environments (I'm not going to go into exact details)

Now, usually for a mobile platform you would have a heavily MDMd device, but GOS doesn't work with MDM AFAIK and I'd say GOS is one of if not the most secure systems out.

So I was thinking, how would one go about using GOS in a highly sensitive / security focused environment? And what software would you install? I think it would be a cool little home project to try setup a GOS device for these scenarios, but I wanted to see what the community thinks, especially with the new stuff like the USB C controls, private spaces etc.

Thoughts?

Thanks!! :)

de0u

oci3o Now, usually for a mobile platform you would have a heavily MDMd device, but GOS doesn't work with MDM AFAIK and I'd say GOS is one of if not the most secure systems out.

My understanding is that GrapheneOS inherits the MDM hooks from AOSP, but most MDM apps incorrectly assume that every Android device has Google Play installed and that Play has system privileges.

oci3o So I was thinking, how would one go about using GOS in a highly sensitive / security focused environment?

That would depend on the environment. I think many secure environments ban personal devices entirely.

phone-company

I work in a state authority and I am allowed to use my Google Pixel with GOS as my private device there. But not as my work mobile phone. There are other requirements for this. Which doesn't mean that it's more secure than my private device with GOS :)