Disable Inter-Process-Communication (IPC)

DeletedUser471

How to disable Inter-Process-Communication (IPC) globally / per app / per profile?

DeletedUser495

DeletedUser471 IPC between apps on the same profile can not be currently disabled/is not implemented. There are certain fundamental functions of apps that allow them to communicate with other apps that when disabled, they would no longer work as they should.

There is no IPC between apps on separate profiles because they are delegated to different sandboxes.

But if the same determined app for instance is installed in multiple profiles, it has a way of correlating those through certain hardware identifiers, performance data and global configuration.

W1zardK1ng

DeletedUser471 as of now its not possible but a planned feature. Hope to see it soon though.

https://github.com/GrapheneOS/os-issue-tracker/issues/2197

https://grapheneos.social/@GrapheneOS/113973056128380064

chinook

DeletedUser495

But if the same determined app for instance is installed in multiple profiles, it has a way of correlating those through certain hardware identifiers, performance data and global configuration.

Or just by communicating over localhost :)
https://www.androidpolice.com/meta-yandex-apps-de-anonymize-localhost-tracking/

DeletedUser495

chinook I use Mullvad Always on and disable localhost in app. Of course that way I am unable to communicate with printers and other devices over local network. Works for some.

02673853

chinook Or just by communicating over localhost :)
https://www.androidpolice.com/meta-yandex-apps-de-anonymize-localhost-tracking/

If an app has no network permission, then it isn't able to use localhost.
If it has network permission, then it could just connect to a server to exchange data.

DeletedUser471

DeletedUser495 i disabled localhost also.

DeletedUser471

For normies: what i mean here is that you want to login to gmail while gmaps dont see your credentials in the same profile.

n3t_admin

DeletedUser471 that's not influenced by IPC. That's an Account Manager feature: https://developer.android.com/reference/android/accounts/AccountManager

DeletedUser471

n3t_admin thx for clarification once again! the title is incorrect here too. what are the benefits of IPC?

n3t_admin

DeletedUser471 what are the benefits of IPC?

really depends on the app. Wouldn't make sense to compile a list. In short: some apps should be able to communicate with one another.

DeletedUser471

n3t_admin yes and i'd rather allow it manually or not.

n3t_admin

DeletedUser471 do you even understand how complex IPC is? Implementing a block requires massive work to make the code safe and effective.

DeletedUser471

n3t_admin > what are the benefits of IPC?

no, i don't. however i think that this is lifesaver feature. i know every line of code in gos is top notch, and it is only os i trust (beside google closedsource firmware; next os is secureblue)

Eirikr70

IPC scopes or whatever we can call it is to my eyes a very important feature. I take as granted that the devs do their best effort to achieve it after the other priorities imposed by Google changing the rules, so let's just wait and trust the team.

DeletedUser471

I need IPC scopes yesterday already. Can anyone point on github link to see status?
I like gcam better and i cant use it since consensus is to use play market instead of aurora so it leaks via ipc.