Running apps via adb installs them on all profiles

domnru

I've observed that when developing and running apps (e.g., Java, Kotlin, Flutter) on a physical device, the app gets installed on all user profiles, even those in BFU mode. These profiles were not unlocked after a device reboot.

Is this the expected behavior? Or is it a potential issue?

de0u

domnru I've observed that when developing and running apps (e.g., Java, Kotlin, Flutter) on a physical device, the app gets installed on all user profiles, even those in BFU mode.

"BFU" and "AFU" are device states, not profile states. At present, profiles other than the owner profile can be running or at rest, but that's not the same thing.

I believe each package exists only once, in one version, on a device. The details of whether it is "installed in" (really: visible in) any profile are complicated.

domnru Is this the expected behavior? Or is it a potential issue?

I believe the expectation is that adb is used by developers, for debugging, on non-production devices.

domnru

de0u I believe each package exists only once, in one version, on a device. The details of whether it is "installed in" (really: visible in) any profile are complicated.

This means the app is only installed once but is visible in each profile? Uninstalling the app in one profile doesn't uninstall it, it just makes it invisible and inaccessible in the profile but still accessible in other profiles?

de0u "BFU" and "AFU" are device states, not profile states.

So unlocking the main profile sets the whole phone in AFU mode. Just curious, whats the difference between the BFU mode of the phone and a secondary user profile which did not get unlocked after reboot. Are there more things to BFU and AFU mode than just encrypted and decrypted storage?

de0u

domnru The app is only installed once but is visible in each profile?

I believe that is correct.

domnru Uninstalling the app in one profile doesn't uninstall it, it just makes it invisible and inaccessible in the profile but still accessible in other profiles?

This is well beyond my expertise. I can imagine the package is reference-counted, but I can also imagine that the owner profile might be able to globally delete it, and/or that adb might be able to globally delete it. Again, adb isn't exactly the same as a user, and my understanding is that the general expectation is that adb is used on non-production devices (thus if "something weird" happens via a deliberately-authorized debugging channel that may not be regarded as interesting).

domnru Are there more things to BFU and AFU mode than just encrypted and decrypted storage?

I believe so. For example, I believe that BFU only apps that declare they support Direct Boot are launched.