-
Notifications
You must be signed in to change notification settings - Fork 278
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Believes all apps within the work profile are not installed #910
Comments
Apologies. In the documentation, it's mentioned ADB/root is required for this to work, and is only a WIP for no root mode. But I'd like to ask, is any app just able to view what other apps you have installed in other profiles without explicit permission to do so? This seems too much of a fingerprint to not be able to disallow, especially when you only use FOSS apps for the most part. |
It requires INTERACT_ACROSS_USERS and/or MANAGE_USERS permissions, I believe which are not granted to user apps without a specific whitelist present in the OS. If the work profile is managed by Insular/Island, it is possible to access the list of apps via the delegation API (#411). |
I'm not certain if either of the two permissions you mentioned are required to do this. Recently, Signal was able to detect I had Google Play Store installed in my work profile despite having neither permission. I was attempting to verify my number, as I was transferring over to a new device, but a message kept appearing about Google Play Services (can't recall what it said exactly), which prevented me from verifying my number. I was initially confused, as I downloaded it directly from their site, which I thought was the version that didn't rely on GMS. And since I had it installed in a separate profile, I didn't think it'd even be aware I had GMS installed. Regardless, I tested to see if uninstalling the Play Store would fix this. This caused Signal to instead provide a warning about notifications, which I accepted, and then allowed me to verify my number. I believe it detected GMS was installed and tried to rely on its push notifications, but since it was located in a separate profile, it was experiencing issues. This proves that apps are able to detect other apps across different profiles without those two permissions. I have Shelter managing my work profile, so this couldn't have been through the use of a delegation API. From a glance, the closest permission Signal has to the two you mentioned is Furthermore, as a test, I revoked App Manager's |
I see. App Manager is listing the other apps because it requests the system to retrieve the uninstalled apps via |
Interesting. Is there a way to view what flags an app uses? Because I'd like to know how Signal managed to detect the Play Store in a separate profile. Based on the developer pages, the app would require the Edit: I was only looking at the |
I don't think that this is the right place to ask such questions. You might find a better answer if you ask them to Signal or Graphene OS developers. Ideally, user apps installed for another user should never be visible to the other users if they do not have it installed or have never installed it in the past, and issue #643 somewhat confirms that such cases do exist. So, I guess in AOSP, this is probably not implemented, and those ROMs have implemented it on their own. But I might be wrong as I haven't looked into the corresponding code to actually understand what is happening here. |
Apparently As a test, a developer of GrapheneOS tried out 20 popular launchers with this special implementation removed and a work profile installed. They experienced no issues, and apps installed within the owner profile were no longer able to view packages installed in a secondary user profile. Based on these results, GrapheneOS no longer has this special implantation in place. I believe if you use this API instead of the flag, it'd fix this bug of App Manager not being able to view or manage packages installed within the work profile. |
Thanks. I'll look into it when I am free. |
Fixed in 7f05cd9 |
Launching activities and setting pages is added in 5cad7e1 |
Please check before submitting an issue
Describe the bug
App Manager claims that any app I've installed within my work profile isn't actually installed. This prevents me from viewing the details of any app that's within my work profile.
To Reproduce
Expected behavior
It should let me view the details of the app as it does with the ones installed within my main profile.
Screenshots
Logs
I used Logcat to examine what App Manager outputs whenever I attempt to view the details of an app I've installed within the work profile. I clicked on Uber in this case, but the log is consistent with other apps within the work profile.
Then a few seconds afterwards:
Device info
Additional context
No response
The text was updated successfully, but these errors were encountered: