• General

  • Disable Internet and Location services only for a profile

When I disable wifi or data if affects all profiles. Can I disable Internet and Location Services for only one profile?

Eg. I have google-maps and normal google stuff in profile-X. I keep it logged in otherwise it's a hassle to type in password manager passwords etc in it when I login next. However, as expected, google tracks everything even if that's not the profile I'm currently logged into. It gives me emails/notifications along the lines "Hey how did you find place-XYZ that you just visited? Mind sharing a feedback?" and all that.

What I want is, turn off any external communication (so Internet (data and wifi) and Location Services I guess) for all apps in profile-X without logging out of it completely. Then turn it back on when I need to. Other profiles should remain unaffected.

Is this possible? If yes how to do it? If no is it something that will be planned or it's not something folks care about much to be on roadmap?

Thanks!

    monozygote Internet (wifi/mobile) is system wide, you can't disable it for just a profile.. you could try with VPN and some firewall rules but I won't be advising how.

    As for location no idea, not using this service.

        monozygote

        Apps don't have access to location unless you grant them the permission. You can also block location with the global kill switch toggle.

        GrapheneOS adds internet as a new permission, so you can deny for a specific app that to keep them from accessing internet.
        Be aware that apps could use other ways like IPC to communicate with the outside world, even though this being rather unlikely.

          monozygote not really sure about this as i don't have a similar usecase, but an idea popped up while reading your post which might work, perhaps u can try it and report back.

          The idea was to somehow make use of 'block all connecetions without vpn' on that specific profile.
          Perhaps u can install wireguard on that profile with a 'faulty' config file, which would then consequently trigger block all connections without vpn.
          Or something like that, i hope u got the idea.

          Obviously this is not advice, just a potentional idea that needs testing, which perhaps might have the outcome u want.

            @monozygote , if you use Private Space instead of User profile - in Settings, there is a toggle for "Location for private space". So, even if you granted Location permission for a specific app then the Location will remain off for the entire Private space.

            monozygote If instead of switching away from the Google-apps profile you were to use "End Session" in the power-button menu, the apps running in that profile would be stopped and thus unable to "watch" where you are.

                de0u That will log me out of that profile which I don't want to as hinted in OP:

                Eg. I have google-maps and normal google stuff in profile-X. I keep it logged in otherwise it's a hassle to type in password manager passwords etc in it when I login next.

                It seems it's not possible for now (switching off Network for specific profiles) so I don't think there's a solution. I did find the global Location services setting for profile so turning that off is easy now. Just can't do it for Internet though (and seems bluetooth etc too as they are cross profile settings).