I’m part of an institution that uses Duo Mobile. I use GrapheneOS so at first I tried using a separate user profile for the Duo app, but switching back and forth between profiles every time I login feels very tedious to me.
I would like to try using shelter to install Duo Mobile to my main profile, along with sandboxed google play services (+ network permissions) so that I can receive push notifications from Duo. My question is what information from the main profile do apps in the work profile like GPS and Duo have access to?
My main concern is inter-process communication between work profile apps and main profile apps, since I can deny permissions to most other sensitive things using the GrapheneOS settings like files, photos, contacts, and call history.