From 265efb60467106b03e5e0a97462f1850bde039d5 Mon Sep 17 00:00:00 2001
From: Daniel Micay
GrapheneOS adds a toggle to the user management settings for disabling - secondary user app installation. You can install the apps you want to be - usable in a secondary user and then disable the ability to install more apps - as that user in the Owner profile. Android supports this as a standard device - management feature but doesn't make it available to a user who owns their own - device.
-GrapheneOS raises the limit on the number of secondary user profiles to 16 - (15 + guest) instead of only 4 (3 + guest) to make this feature much more - flexible.
+GrapheneOS provides improvements to user profile functionality and is + working on further improvements to make switching between them and monitoring + other profiles much more convenient.
-GrapheneOS also enables support for logging out of user profiles without - needing a device manager controlling the device to use this feature. Logging - out makes profiles inactive so none of the apps installed in them can run. It - also purges the disk encryption keys from memory and hardware registers, - putting the user profile back at rest.
+Further UX improvements are in active development and testing.
+GrapheneOS raises the limit on the number of secondary user profiles to 16 + (15 + guest) instead of only 4 (3 + guest) to make this feature much more + flexible.
+GrapheneOS also enables support for logging out of user profiles without + needing a device manager controlling the device to use this feature. Logging + out makes profiles inactive so none of the apps installed in them can run. It + also purges the disk encryption keys from memory and hardware registers, + putting the user profile back at rest.
+GrapheneOS adds a toggle to the user management settings for disabling + secondary user app installation. You can install the apps you want to be + usable in a secondary user and then disable the ability to install more apps + as that user in the Owner profile. Android supports this as a standard device + management feature but doesn't make it available to a user who owns their own + device.
+