Guest Mode - End Session - Does Not Delete Data

gos-users

Hello,

I exclusively use my GOS device in Guest Mode.
I particularly like the idea that, with auto-reboot enabled, my profile gets permanently deleted.

In the Owner profile, I install the apps I need and then quickly reinstall them when I switch to Guest Mode.

However, even when clicking "Delete Guest activity", if I then select "End Session", the guest profile is not immediately deleted.
Even if I switch back to the Owner profile, I can still return to the same Guest profile afterward.

I thought that as soon as I connect to another profile, the Guest Mode profile would be wiped.

Technically, at what point during reboot is the Guest Mode profile deleted?
Could an attack theoretically prevent the Guest Mode profile from being wiped during reboot?

gos-users

That's why I suspect a bug.

When I'm logged into the Guest profile and try to switch to the Owner profile, I get the following message:

Exit Guest Mode?
This will delete apps and data from the current guest session.

That's why I find it strange that the same behavior doesn't occur when the Guest Mode profile is simply locked.

dhhdjbd

i just tested it, and my guest profile gets deleted when i switch back, it does not exist as a option and i would have to "add guest" again.

so it sounds like a bug to me..

gos-users

dhhdjbd

Yes, I experience the same behavior when I'm logged into the Guest Mode profile.
As soon as the screen is locked, I can switch to the Owner profile and then return to Guest Mode without losing any data.

dhhdjbd

gos-users

do you actually use guest mode?

It sound like you are just using a normal user.
(You have to use 'add guest', click on this one. If you can set a profile name, then it is the wrong one )

Because i ment, that i am not experienceing at all what you are experiencing.
My guest user did get deletes properly and immediatly and a new one did not have the data from the old one.
(Furthermore i have no 'end session' button in this mode on the lock screen, only in the 'user profile' mode)

And i just ment before in my previouse comment, that in the case that you are actually using the guest mode, if it does not get deleted, then this is a bug and not how it should be.
Why your device specifically has this bug, i dont know.

gos-users

dhhdjbd

Look this video

https://app.filen.io/#/d/2c6eb733-578c-437d-b719-1409b66eb33f%23mgHOF63EQgQogv78wc9JmNkN4hZH9Jfn

gos-users

dhhdjbd

Why your device specifically has this bug, i dont know.

I reproduced this on both a Pixel 9 and a Pixel 8, so it happens on all devices.

dhhdjbd

gos-users

oh sry, you are right, thanks for the video. I misunderstood what you ment.

Yes when i do it like that, i also get this bug.

I guess the work around is using not 'end session' like this, but by using the drop down button from the guest mode notification.
Using this always deleted the guest profile completly for me.

dhhdjbd

gos-users

https://github.com/GrapheneOS/os-issue-tracker/issues/2516

you might want to comment this video on this issue (this was the only one i could find which sounded related.. even tho it is pretty old.
The video would be probably kinda helpfull if someone wants to look into it at some point)

gos-users

I have observed the same behavior, but only when switching profiles from the lock screen.
Otherwise, the guest profile is systematically deleted as expected.

Therefore, I am wondering if this could be considered a bug.

Additionally, I am curious about the exact moment when the guest profile is supposed to be deleted after a reboot, and whether an attacker could potentially interfere with this deletion process.

I had initially assumed that the guest profile would be erased as soon as the user logged out or switched profiles.

gos-users

dhhdjbd

Thanks, I'll take care of it and try to make a clearer video :)