Google Parental Control App support similar to Android Auto, Play Services

gosjos

Hi,

is there any chance to get support for Google's Parental Control App (GPCA) in GrapheneOS? This app gets installed automatically when a supervised profile (child profile) is added to a device, so it can be managed with Google Family Link (notice GPCA != Google Family Link App).

I tried to configure GrapheneOS in a Pixel 7a for my child, but at this step (Android Parental Control App installation ant setup), the process enters in a loop (the GPCA crashes, probably trying to access to places/services where it is not allowed, trying to continue with the account's setup crashes again)

I'm assuming that providing a "mirrored + sandboxed" way of installing it (the same as Play Services or Android Auto) by means of the GOS app store could allow for it to work under GrapheneOS.

Having this possibility available would allow children to use GrapheneOS instead of Google's Android, allowing us (parents) to show them how to better protect their privacy etc. If, instead of growing up knowing how things work only in Google's Android, they know how GrapheneOS works, probably they won't assume that the "default" is Google's Android (similar to Windows/Linux familiarization since early stages)

A side effect would probably be that Vanadium should be disabled and Chrome used instead, because most parental control apps allow only Chrome as browser in order to protect browsing, but I'm assuming this can be handled entirely by parents (Installing Chrome, I guess it would install also its webview, and then disabling Vanadium by means of Family Link, not sure what would happen with Vanadium webview/Chrome webview)

I can see the irony of asking for support of a parental control app using the child's privacy as a goal. But besides not providing a smart phone to them under they are over 18 years old, this is the only way I can see to allow my children to get familiar with al this technology while keeping them safe.

Of course, I'm volunteering to perform as many tests or provide as much information as needed if this possiblity is considered to be integrated in GrapheneOS.

And, please, don't transform this thread into "best parenting app is confidence, talk to your children, etc." I already do that, and in an ideal world, no parental control apps would be needed, but we are not there, and thus I'm on the side of respectful (only when it is needed), informed (my children are aware of it), parental control apps, and this message is about having support for the core components in GrapheneOS, not about whether parental control apps are good or evil.

Thanks in advance

WAU3604

gosjos As far as I know I'm not sure if this is possible due to GrapheneOS's sandboxed Google Play services, and the privileges that GPCA and other google services require being invasive to the privacy and security of GOS.

But maybe GOS devs know more about if this could work.

schklom

One way is to give them a Secondary user Profile and not give them the main profile (Owner) password, and restrict the 2ndary profile's ability to install apps.

I think this is as close to controlling apps as you can get on GOS for free.

Alternatively, you could always use a MDM solution, such as HeadWind or Google's or Microsoft's MDM. HeadWind MDM is only really useful if you're okay paying for the premium version though, but its base is opensource.

FlyingStars_

I'm pretty sure a third party app can do this. I think for the GOS team, such functionality is extremely low priority as compared to more security and privacy improvements.

As a side note: nothing prevents a child from trivially bypassing such restrictions by simply, for example, wiping the device and setting it up again without parental controls (as GOS doesn't have FRP).