IrregularUser511 Wow, reading all this, I think it would have been easier to simply include a "LAN permission" as a separate permission.
Graphene OS developers thinks so to, they would had preferred a separate LAN access permission instead of including it into Nearby Devices. But they decided Googles design is good enough, and kind of makes sense from a security perspective, as LAN device access is akin to Bluetooth device access in terms of tracking opportunities and vulnerable devices and such.
NetRunner88 If I choose Disable, then I want to revert, I can't, the only available options are
Enable
Disable
Something to improve here to revert to default
Google doesn't want a separate LAN access toggle, they want LAN access to be part of Nearby Devices permission like everything else that is. So they only want Allow and Deny, nothing more granular. The extra permission state is only temporary until you have made a decision what state you want to have Nearby Devices permission in.
AcclaimSublevel19 does that mean Inter Profile Sharing is now broken? Is there a way around that?
Yes, the Interprofile Sharing app no longer works in Android 17. However, Google's implementation to block loopback access across profiles is not secure, and I have found a way to bypass it already. Theoretically, Interprofile Sharing app can adapt to use that bypass and start working again. But GrapheneOS developers have said they might fix the implementation themselves so the blocking is actually effective.
(Google just use firewall rules to block communication, but there are side channels left. Proper solution would be to use Network Namespaces.)
AcclaimSublevel19 I assume that also goes for the private space, right?
Yes. But there is an official supported way to transfer files into private space in the OS itself, and clipboard is shared too, without relying on loopback or any app.
RRZishe Sorry if this is stupid question, but would the VPN kill switch block these LAN connections and essentially make the permission irrelevant for all apps?
Yes. If you have anything in the VPN slot, whether a VPN app, firewall app or monitoring app, Nearby Devices permission state will be ignored, and the VPN app decides instead whether to allow or not. A reputable VPN would deny LAN access by default for all apps.
(A monitoring app on the other hand may always allow LAN access, making your attempts to deny it by removing Nearby Devices permission futile.)