Hacker News Reader

> GrapheneOS allows disabling network for a particular app, alongside the other permission settings.

This feature is also useful in LineageOS, as a kind of native firewall. Thankfully most open source apps on my device don't use network connectivity so the permission is greyed out to begin with.

View on HN

In e/OS, this is called "Advanced Privacy".

Sorry, I just checked the "Advanced Privacy" settings, but I see nothing about restricting network access for a particular app. I'd be very interested in that feature though - do you have more pointers how exactly to restrict a single app?

Sorry, on e/OS this is under app settings where you can uncheck "Allow network access" for apps that have it.

This is just a feature inherited from LineageOS, not anything special to /e/OS.

Yes. And the same applies to GrapheneOS does it not?

No, GrapheneOS has its own alternative implementation where users can completely revoke network permission from the app, it has been proven more robust a few times now, eg. https://review.lineageos.org/q/topic:%2213-firewall-bypassab...

My DivestOS features both the GrapheneOS and LineageOS implementation, and I document the former as block and the latter as "data restriction" (eg. to simply block over cellular) as it cannot guarantee a real block.

Reply on news.ycombinator.com