Chrome-side lockbox bindings

chrome/browser/chromeos/login/login_utils.cc

Index: chrome/browser/chromeos/login/login_utils.cc
diff --git a/chrome/browser/chromeos/login/login_utils.cc b/chrome/browser/chromeos/login/login_utils.cc
index f71a5a54e9a7087076ee9a84f3d009ffb34775c8..1ffc92621cba125536f2f69d0e9a2523d14ae3d0 100644
--- a/chrome/browser/chromeos/login/login_utils.cc
+++ b/chrome/browser/chromeos/login/login_utils.cc
@@ -214,6 +214,17 @@ void LoginUtilsImpl::CompleteLogin(
   VLOG(1) << "Completing login for " << username;
   btl->AddLoginTimeMarker("CompletingLogin", false);
 
+  // Own the lockbox if still not owned. This is not critical if it fails
+  // because the lockbox will be sealed on the first home mount anyway.
+  if (CrosLibrary::Get()->EnsureLoaded()) {
+    CryptohomeLibrary* cryptohome = CrosLibrary::Get()->GetCryptohomeLibrary();
+    if (cryptohome && cryptohome->InstallAttributesIsReady() &&
+        cryptohome->InstallAttributesIsFirstInstall()) {
+      cryptohome->InstallAttributesSet("enterprise.owned", "false");
+      cryptohome->InstallAttributesFinalize();
+    }
+  }
+
   if (CrosLibrary::Get()->EnsureLoaded()) {
     CrosLibrary::Get()->GetLoginLibrary()->StartSession(username, "");
     btl->AddLoginTimeMarker("StartedSession", false);