Newbie questions about features (firewall, profiles, etc.)

ivan_lt

Hello!

I'm considering moving to GrapheneOS (from LineageOS with which I've been generally happy for the last few years). Everything wtitten in the FAQ sounds super cool. Can you please enlighten me even further on what to expect, in particular:

How much control do I have over the built-in firewall? Block/allow IP ranges? Block requests by domain name? (Use case: an app checks for updates on one domain, fetches news from another one and sends bug reports to yet another. Using NetGuard, I derive a lot of pleasure (and some utility) from being able to separately control these connections.)

Will I be able to somehow log in as an admin/superuser and gain access to any file of any app? (To inspect SQLite databases, reset options, edit saved games, work around bugs abundant in FOSS, etc. -- you get the idea.)

Are there profiles for notifications, volume/vibration and so on? I've read you can create profiles for working with/without Play Services which sounds amazing but what about other settings?

Any built-in shell like Termux?

Lastly, is there a blue light filter?

Thanks in advance!

roddyd

ivan_lt How much control do I have over the built-in firewall? Block/allow IP ranges? Block requests by domain name? (Use case: an app checks for updates on one domain, fetches news from another one and sends bug reports to yet another. Using NetGuard, I derive a lot of pleasure (and some utility) from being able to separately control these connections.)

The firewall only allows you to enable or disable an app's access to the Internet via the app permissions.

ivan_lt Will I be able to somehow log in as an admin/superuser and gain access to any file of any app? (To inspect SQLite databases, reset options, edit saved games, work around bugs abundant in FOSS, etc. -- you get the idea.)

No, GrapheneOS will not give you superuser access because it reduces security.

ivan_lt Are there profiles for notifications, volume/vibration and so on? I've read you can create profiles for working with/without Play Services which sounds amazing but what about other settings?

Yes, each user profile can have its own apps installed (also with their own permissions) as well as separate notification settings. I think volume settings (ring/vibrate/silent) are shared between all profiles.

ivan_lt Any built-in shell like Termux?

No but you can install your own.

ivan_lt Lastly, is there a blue light filter?

Yes, there is a Night Light feature just like in stock Android.