Master password for changing settings

pixpot

One great feature would be to be able to sett a master password (different from the one used to unlock the phone) to access (and change any settings).

Use case: a phone running GOS i used by multiple people. The owner wants to restrict other user abilities to change any core settings (app installation, wifi settings, security settings, etc).

Is this a feature that is feasable and does it make sense?

[deleted]

That's pretty much what is already available with being able to create guest and user profiles.

pixpot

[deleted] True. But that requires me to first log in to the owner profile and switching profiles before handing over the phone to the other user. If the phone is turned off, i would like a secondary user to start it, and login but not beeing able to change any settings.

[deleted]

pixpot Sensitive data is stored in user profiles. User profiles each have their own unique, randomly generated disk encryption key and their own unique key encryption key is used to encrypt it. The owner profile is special and is used to store sensitive system-wide operating system data. This is why the owner profile needs to be logged in after a reboot before other user profiles can be used. The owner profile does not have access to the data in other profiles. Filesystem-based encryption is designed so that files can be deleted without having the keys for their data and file names, which enables the owner profile to delete other profiles without them being active.

https://grapheneos.org/faq#encryption

de0u

pixpot If the phone is turned off, i would like a secondary user to start it, and login but not beeing able to change any settings.

Lots of things are theoretically possible. What you describe sounds somewhat like MacOS.

But the change you suggest is not minor, and it would be a change to security-critical code. It may well not happen - unless perhaps Google thinks it would be useful for tablets and added it to AOSP.