app-level isolation

ffuu

how to achieve app-level isolation?
I have several apps for which I want to make sure they don't know about the environment (other apps, access data, etc.)
Private Space and works profiles (Insular, Shelter, ...) create just one alternative space for the apps but I'd need separate space for each of these apps
I would end up with a huge number of user profiles which is incredibly clumsy

is there any way how to host such isolated apps seamlessly inside the owner profile?

trilogy6202

ffuu No unfortunately not. You'll have to try to to find the right balance between your thread model and desire for convenience.

I started out with many user profiles but have slowly consolidated apps to fewer profiles to the point where today I only use private space plus one additional user profile.

EDIT: Well maybe some apps could be converted to PWA's? As far as I remember PWA's don't have access to check which apps are installed on your device. Can someone confirm?

Delaney

ffuu This feature doesn't exist yet. Last I checked, it was being worked on in the form of app communication scopes, but since Android 15 introduced private space, work on this has been paused. Apparently the grapheneos team isn't sure how to best implement this kind of feature.