Disable pulldown menu from lock screen

Blackie2k2

I need to be able to disable the pulldown menu from the lockscreen for security purposes (and possibly others do too.)

Is this feature available in system settings?

nandohyphen1

Blackie2k2 Is this feature available in system settings?

No it is not. Stock Android is the same way (at least it was when I used it last many moons ago).

MyIdentityIsntImportant

Blackie2k2 Is this feature available in system settings?

It's not (at least at the time of writing this message).

On the same note, GrapheneOS already limits access to various "sensitive" items & controls found in the pulldown menu while the phone is locked. A couple of non-exhaustive examples of actions that are considered "sensitive" include toggling Location on/off, toggling Airplane more on/off, and listing the currently active background apps; all of which would require you (or any attackers) to first unlock the phone. You can check yourself which actions are protected & which are not simply by trying to access them from the pulldown menu when in the lock screen. So you might not be as exposed as you think.

What's considered a "sensitive" action is up to both the devs of GrapheneOS and Android itself, i.e. Google, so you can take things up with them if you have suggestions.

Blackie2k2

nandohyphen1 Thank you for the response. Not sure why iOS allows this and Android doesn't but everything can't be the same or better I guess :(

Blackie2k2

MyIdentityIsntImportant
How do I ask Graphene? This is my first time posting on these boards so I just assumed they read the General Board.

Maybe I need to use a third party application to lock this down if Graphene refuses to work on this? Would make me sad and confused but if there is no other option...

nandohyphen1

Blackie2k2 How do I ask Graphene?

You could open an issue on the issue tracker on GitHub.
https://github.com/GrapheneOS/os-issue-tracker
You'll need a GitHub account if you don't have one

wizoatk

Blackie2k2

You can already delete any/all of the tiles. What other items on the pull down do you consider security sensitive?

Novalissoide

Blackie2k2 Maybe I need to use a third party application to lock this down

No, what you should do is keep an eye on the apps you'll be adding, check if any of your installed apps comes with a quick tile, if it does, and that tile is important to keep behind lock, just don't activate it.

Any third party app that adds a tile, can be launched from lockscreen without the need of unlocking. The GrapheneOS quick tiles, as @MyIdentityIsntImportant mentioned, will ask for unlock credentials if they are security sensitive.

I was a bit surprised finding by chance that RethinkDNS was possible to toggle OFF without unlocking, but again, this goes for any user installed app as I understand it.

Blackie2k2

wizoatk Guess I just don't like anyone being able to access pulldown and get information on my system like wifi and my accounts, toggle flashlight on to drain my battery faster, etc.

Novalissoide Yeah tiles and stuff like that were one of the issues I was worried about.

Johnnyloans

Novalissoide Any third party app that adds a tile, can be launched from lockscreen without the need of unlocking.

I have KDE-connect send clipboard to my pc
And wireguard quicktiles

Both require unlocking at the lock screen.

Elysium

Blackie2k2 Yeah tiles and stuff like that were one of the issues I was worried about.

The only thing that is accessible is auto-rotate setting and flashlight. Everything else will need "unlock" to be changed.
There is a widget in the offline app Trail Sense, that you can put on the home screen, if you still want a fast access after unlock.

Blackie2k2 Guess I just don't like anyone being able to access pulldown and get information on my system like wifi and my accounts

I mean, as workaround, remove the tiles?

It just seems the security scenario where stuff like this would matter would be very extreme. But that is up to you of course.

wizoatk

Blackie2k2
Sorry, I was wrong. There's a set of tiles that can't be removed. Still I don't see the security issues with those six tiles, but I haven't given it much thought either.

Johnnyloans

Blackie2k2 get information on my system like wifi and my accounts,

This doesnt exist on the lock screen. It doesnt show wifi name.

If you did leave your phone near your home, they know where you live and can tell what wifi has the strongest signal right outside.

being on McDonalds wifi while inside McDonalds isnt a mystery.

Kamika242

wizoatk Still I don't see the security issues

And I see security and privacy issues! GrapheneOS claims to be private and secure, so a locked phone should be locked with nothing visible what's inside!

Novalissoide

Johnnyloans Let me rephrase this, a third party app-tile might be launchable without unlock if the developer don't disallow this, even if security sensitive. So, just be aware of this possibility is my only point.

edent

I've just tried on my phone and the only things I could change while locked were:

Screen brightness.
Night light.
Torch
Home Assistant (which I've configured to be available).

Everything else required me to unlock it.

So, yes, there is the theoretical possibility that a thief could drain your battery by changing the screen brightness and turning on your torch. But I can't see much of a security problem with that.

Johnnyloans

edent

BFU speed run!

Elysium

RethinkDNS let's you disable it via the tile when locked, unless you use screenlock in the app settings. Might be relevant to some.

EverettHitch

Kamika242 that is not a security but a privacy issue, wake up man. Do not ask AOSP how AOSP should work, it is bigger than you. Use it or lose it.

Novalissoide

Kamika242 security

If what's visible is not sensitive, what security issue?

DohnJoe

Kamika242 so a locked phone should be locked with nothing visible what's inside!

You already have this.
Even if you cannot remove the torch tile, it's not revealing anything about your phone.

mmmm where everything except camera access (unfortunately) can can be disabled

On GOS you can't disable something else and you can disable camera.

Every system has its own set of features, I would say.

While I would gladly accept a toggle setting to allow/disallow using the rest of the tiles while locked, I also think the way it is built now is actually better.

Basically every app suggests if they are sensitive enough to be usable or not and the developer can chose for their own app.