security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

split out disabling secondary user app install

Browse Source
This commit is contained in:
Daniel Micay 2022-05-09 13:58:07 -04:00
parent 18cd6dd0a4
commit de692238a9
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
static/features.html
View File

@ -88,6 +88,8 @@
<li> <li>
<a href="#grapheneos">GrapheneOS</a> <a href="#grapheneos">GrapheneOS</a>
<ul> <ul>
<li><a href="#disabling-secondary-user-app-installation">Disabling secondary
user app installation</a></li>
<li><a href="#user-installed-apps-can-be-disabled">User installed apps <li><a href="#user-installed-apps-can-be-disabled">User installed apps
can be disabled</a></li> can be disabled</a></li>
<li><a href="#broad-carrier-support">Broad carrier support without invasive carrier access</a></li> <li><a href="#broad-carrier-support">Broad carrier support without invasive carrier access</a></li>
@ -312,10 +314,20 @@
special privileges.</a></li> special privileges.</a></li>
<li>Fixes for multiple serious vulnerabilities not yet fixed upstream due to a <li>Fixes for multiple serious vulnerabilities not yet fixed upstream due to a
flexible release cycle / process prioritizing security.</li> flexible release cycle / process prioritizing security.</li>
<li>Added toggle for the Owner user to disallow secondary users from
installing apps based on the standard device management capability.</li>
</ul> </ul>
<section id="disabling-secondary-user-app-install">
<h3><a href="#disabling-secondary-user-app-installation">Disabling secondary
user app installation</a></h3>
<p>GrapheneOS adds a toggle to the user management settings for disabling
secondary user app installation. You can install the apps you want to be
usable in a secondary user and then disable the ability to install more apps
as that user in the Owner profile. Android supports this as a standard device
management feature but doesn't make it available to a user who owns their own
device.</p>
</section>
<section id="user-installed-apps-can-be-disabled"> <section id="user-installed-apps-can-be-disabled">
<h3><a href="#user-installed-apps-can-be-disabled">User installed apps can be disabled</a></h3> <h3><a href="#user-installed-apps-can-be-disabled">User installed apps can be disabled</a></h3>