Work Profile manager better than Shelter?

hemlockiv

Shelter is a good, basic, secure Work Profile Manager app, but it hasn't been updated in years, and the readme says:

there is a limited set of features that are possible to implement via the app. As we do not intend on leveraging (or "abusing") adb privileges, the features of Shelter can only be a strict subset of the exposed, unprivileged APIs.

That makes me wonder, IS there a work profile manager app that DOES abuse adb privileges to provide more features? Adb and other privileged apis are not a security risk if implemented judiciously; it would be nice to have more granular cross-profile interaction controls.

Does such an app exist?

Novaliss

hemlockiv Adb and other privileged apis are not a security risk if implemented judiciously;

In a normal daily phone?

ClickClickDrone

hemlockiv Adb and other privileged apis are not a security risk if implemented judiciously

That's a dangerous mindset, because privileged functionality is extremely hard to implement correctly due to potential oversights, and potential lack of knowledge by developers to do it, etc.

The tiniest mistake in a privileged app can have extremely serious consequences.

If I were you I'd consider attempting to replace Shelter with the Private Space feature, thus eliminating many security issues such as, but not limited to the aforementioned.

hemlockiv

Novaliss Yes...?

hemlockiv

ClickClickDrone Thanks for the safety chat. If you don't know of any alternative apps that would answer the question, you don't actually have to comment here at all, you know that right?

ClickClickDrone

hemlockiv

I did comment because it is worth pointing out that this suboptimal mindset isn't a good idea, and even suggested an alternative.

I do understand it wasn't helpful for you, but perhaps it was helpful for someone else?

Johnnyloans

hemlockiv

Perhaps you'll find inspiration from this 1 comment:
https://discuss.grapheneos.org/d/1841-ms-intune-company-portal-with-work-profile-not-working/158

Albeit, not ideal I know.

ClickClickDrone

It isn't suboptimal for everyone. We all don't have the same threat model or priorities.

Abd isnt inherently evil or dangerous. I can use it to give the microphone permission, give FMD permission to turn on location services, or use it like the aforementioned link for my employer.

Carrying 2 phones or using stockOS due to my job's limitations are not objectively the best decision over abd use.

If my my computer is compromised, then the adversary has access to everything my phone does + a trove of sensitive documents.

Rules of thumb are nice and all but all too often applicated to everything in sight.

A mild warning would suffice for OP. We already had 1 comment on the subject, we don't need to dog pile OP.

Upstate1618

hemlockiv
If you don't know of what work profile apps suit you, you don't actually have to ask here at all, you know that right? Why not just ask your workplace admin?

Johnnyloans

Upstate1618 The ignorance & irony of this comment is more sad than funny

Johnnyloans

Upstate1618

It's a comment that adds nothing to the discussion and misses the point entirely.

as for your question:
1)

Upstate1618 If you don't know of what work profile apps suit you, you don't actually have to ask here at all, you know that right?

There has to be a starting point. How will OP know the best profile manager if they aren't aware of what exists?
So, step 1: Their question is: "Does anyone know of what options exist"
step 2: would be research and weighing the pros and cons. (this can't be step 1. Researching pros and cons of an unknown product)

Upstate1618 Why not just ask your workplace admin?

The person looking for a work profile manager is likely in the process of creating a new foundation and aren't a lost sheep trying to log into their company's SSO.
It'd weird if I asked if anyone knows of a good business accountant (for my business) and 1 of the replies is: "ask your boss."
Me: "Well, I am the boss."

In general, the op seems to be technically skilled and doesn't need to be babied.

Upstate1618

Johnnyloans
Why do you say my comment is ignorant? Can you elaborate it?

Upstate1618

If you are the administrator of your organization and looking for work profile solutions, I'd recommend Google Workspace. See https://support.google.com/work/android/answer/6396012

hemlockiv

To be clear, a "work profile" does not need to be used in relation to an actual workplace. It's just a type of highly-integrated secondary user profile in the Android OS, like Private Space but easier to access. I am asking about if there are any apps like Shelter or Insular, but more richly featured. If you are not familiar with either of those two apps as a starting point, you probably don't need to add anything to this conversation.