Does owner profile have access to other profiles?

Geodude365

Should I install all of my Google stuff in another profile so I can use the "end session" feature as a sort of kill switch? Does installing all of the Google stuff in the owner profile allow it to access core system files or other profiles or something that they otherwise wouldn't be able to access if they were on a different profile?

evalda

Geodude365 simple answer - keep it simple and use Owner profile with sandboxed Play Services (if you need it, i.e. "Google stuff"). Long version - it depends on your threat model.

Geodude365

evalda So can Google access other profiles if on the owner profile?

matchboxbananasynergy

Geodude365 No. The owner profile is like other profiles, so it has to no additional access. Sandboxed Google Play means that the Google apps are regular sandboxed apps, so the same rules apply to them as all of your other apps. Apps in the owner profile can't see apps in other profiles, the same as apps in secondary user profiles.

Geodude365

matchboxbananasynergy ah ok so apart from gaining a "kill switch" by being able to shut down non owner profiles, there's no real benefit to moving my googlefied setup to another profile and keeping the owner one minimal and FOSS?

matchboxbananasynergy

Geodude365 Correct. I recommend taking a look at this post too for more information:

https://discuss.grapheneos.org/d/168-ideas-for-user-profiles/2

Geodude365

matchboxbananasynergy Thank you!