Comment by ggm

11 hours ago

Will the sandboxed google play permit banking apps to work using TPM and secured credentials?

Is it even possible to store secure credentials properly?

I would expect whatever you initialised before grapheneOS is wiped before you can run the alternate OS.

Is termux possible with a root/sudo function?

15 comments

ggm

Reply
hashworks  11 hours ago

> Will the sandboxed google play permit banking apps to work using TPM and secured credentials?

Apps that don't work don't fail due to technical reasons but because upstream says so, i.e. Google Wallet. My banking app works just fine.

> I would expect whatever you initialised before grapheneOS is wiped before you can run the alternate OS.

Yes.

> Is termux possible with a root/sudo function?

GOS doesn't support root by itself since they deem it a security risk, but it's possible.

ulrikrasmussen  11 hours ago

My banking app works fine on GrapheneOS today, but not every banking app does. If it depends on Google Play Integrity with strong integrity it won't because Google has successfully sold the blatant anti-competitive lie that you need to vendor lock-in your users to their OS to get security on mobile.

Secured credentials work fine, everything works fine except stuff that by design is locked in to Google like Google Pay.

anon5739483  11 hours ago

I don't think GrapheneOS team would partner with a vendor unless their security/usability standards were met (considering how long it took since the initial announcement) so I'm expecting feature parity with Pixel variants.

  • kelnos  10 hours ago

    I'm just really curious if this phone is going to pass Google's conformance tests and whatnot. I feel like some of that is incompatible with GrapheneOS's security model, so I wonder what's going to happen there.

kelnos  10 hours ago

I think most banking apps already do work on GrapheneOS (not sure about TPM/secured credentials though). Graphene IIRC keeps a compatibility list somewhere. Some don't work, of course, but more do than I would have expected.

For me, the big question is if Google Wallet & its NFC payments will work. They don't on GrapheneOS currently, but if Motorola plans for this to be a fully Google-certified phone with GApps and everything, it will have to, somehow.