The Network permission is added by GrapheneOS, so to keep compatibility with Android it's by default granted to apps. GrapheneOS doesn't show this permission for some apps, however — those that don't request any network permissions in their manifest. I have two questions stemming from this:
- If an app that's not requesting Network permission in its manifest is updated unattended to request it, would GrapheneOS set the Network permission to allowed or revoked? Does it matter if the app is instead updated with the package installer prompt? Would it have an additional Network permission toggle like for fresh installations?
- If an app that's already granted Network permission is updated to not request it in its manifest anymore, and then the same thing as in item #1 happens, does it change any of the answers now?
I think this is a legitimate security-related question, so I'm gonna tag @GrapheneOS here, I hope it wouldn't come across as rude.
Thank you