Index: chrome/browser/chromeos/policy/proto/chrome_device_policy.proto |
diff --git a/chrome/browser/chromeos/policy/proto/chrome_device_policy.proto b/chrome/browser/chromeos/policy/proto/chrome_device_policy.proto |
deleted file mode 100644 |
index ec401572adbd55474aa1ac2f12fd2f99899d6e75..0000000000000000000000000000000000000000 |
--- a/chrome/browser/chromeos/policy/proto/chrome_device_policy.proto |
+++ /dev/null |
@@ -1,320 +0,0 @@ |
-// Copyright (c) 2012 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-syntax = "proto2"; |
- |
-option optimize_for = LITE_RUNTIME; |
- |
-package enterprise_management; |
- |
-message DevicePolicyRefreshRateProto { |
- // In milliseconds. |
- optional int64 device_policy_refresh_rate = 1; |
-} |
- |
-message UserWhitelistProto { |
- // If a UserWhitelistProto is included in the ChromeDeviceSettingsProto but |
- // the user_whitelist field is empty then no user can sign-in. |
- repeated string user_whitelist = 1; |
-} |
- |
-message AllowNewUsersProto { |
- // Determines whether we allow arbitrary users to log into the device. |
- // This interacts with the UserWhitelistProto as follows: |
- // allow_new_users | user_whitelist | anyone can log in |
- //-----------------+--------------------+------------------ |
- // present, true | not present | Yes |
- //-----------------+--------------------+------------------ |
- // present, true | present | Yes |
- //-----------------+--------------------+------------------ |
- // present, false | not present | (Broken) Yes |
- //-----------------+--------------------+------------------ |
- // present, false | present | No, W/L enforced |
- //-----------------+--------------------+------------------ |
- // not present | not present | Yes |
- //-----------------+--------------------+------------------ |
- // not present | present, empty | Yes |
- //-----------------+--------------------+------------------ |
- // not present | present, non-empty | No, W/L enforced |
- //-----------------+--------------------+------------------ |
- optional bool allow_new_users = 1 [default = true]; |
-} |
- |
-message GuestModeEnabledProto { |
- // Determines if guests are allowed to log in to the device. |
- optional bool guest_mode_enabled = 1 [default = true]; |
-} |
- |
-message ShowUserNamesOnSigninProto { |
- // Determines if we show pods for existing users on the sign in screen. |
- optional bool show_user_names = 1 [default = true]; |
-} |
- |
-message DataRoamingEnabledProto { |
- // Determines if cellular data roaming is enabled. |
- optional bool data_roaming_enabled = 1 [default = false]; |
-} |
- |
-message DeviceProxySettingsProto { |
- // One of "direct", "auto_detect", "pac_script", "fixed_servers", "system" |
- optional string proxy_mode = 1; |
- optional string proxy_server = 2; |
- optional string proxy_pac_url = 3; |
- optional string proxy_bypass_list = 4; |
-} |
- |
-message CameraEnabledProto { |
- optional bool camera_enabled = 1; |
-} |
- |
-message MetricsEnabledProto { |
- optional bool metrics_enabled = 1; |
-} |
- |
-message ReleaseChannelProto { |
- // One of "stable-channel", "beta-channel", or "dev-channel" |
- optional string release_channel = 1; |
- |
- // If |release_channel_delegated| is set to true and the |release_channel| |
- // field is not set or left empty, the user can select the channel. If the |
- // |release_channel| is specified it will always override users choice! |
- optional bool release_channel_delegated = 2; |
-} |
- |
-message DeviceOpenNetworkConfigurationProto { |
- // The network configuration blob. This is a JSON string as specified by ONC. |
- optional string open_network_configuration = 1; |
-} |
- |
-// Policies to turn on portions of the device status reports. |
-message DeviceReportingProto { |
- optional bool report_version_info = 1; |
- optional bool report_activity_times = 2; |
- optional bool report_boot_mode = 3; |
- optional bool report_location = 4; |
-} |
- |
-message EphemeralUsersEnabledProto { |
- // Determines whether users should be treated as ephemeral. In ephemeral users |
- // mode, no cryptohome is created for the user, but a tmpfs mount is used |
- // instead such that upon logout all user state is discarded. |
- optional bool ephemeral_users_enabled = 1; |
-} |
- |
-// Details of an extension to install as part of the AppPack. |
-message AppPackEntryProto { |
- optional string extension_id = 1; |
- optional string update_url = 2; |
- optional bool online_only = 3; |
-} |
- |
-message AppPackProto { |
- // List of extensions to install as part of the AppPack. |
- repeated AppPackEntryProto app_pack = 1; |
-} |
- |
-// This is a special policy for kiosk/retail mode that specifies what apps |
-// should be pinned to the launcher. For regular accounts, pinned apps are |
-// controlled through user policy. |
-message PinnedAppsProto { |
- // App IDs for the apps to pin. |
- repeated string app_id = 1; |
-} |
- |
-message ForcedLogoutTimeoutsProto { |
- // All timeouts are specified in milliseconds. |
- |
- // Specifies the timeout before an idle user session is terminated. |
- // If this field is omitted or set to 0, no logout on idle will be performed. |
- optional int64 idle_logout_timeout = 1; |
- |
- // Specifies the duration of a warning countdown before the user is logged out |
- // because of idleness as specified by the |idle_logout_timeout| value. |
- // This field is only used if |idle_logout_timeout| != 0 is specified. |
- optional int64 idle_logout_warning_duration = 2; |
-} |
- |
-message ScreenSaverProto { |
- // Specifies the extension ID which is to be used as a screen saver on the |
- // login screen if no user activity is present. Only respected if the device |
- // is in RETAIL mode. |
- optional string screen_saver_extension_id = 1; |
- |
- // Specifies the timeout before the screen saver is activated. If this field |
- // is omitted or set to 0, no screen-saver will be started. |
- // Measured in milliseconds. |
- optional int64 screen_saver_timeout = 2; |
-} |
- |
-// Enterprise controls for auto-update behavior of Chrome OS. |
-message AutoUpdateSettingsProto { |
- // True if we don't want the device to auto-update (target_version_prefix is |
- // ignored in this case). |
- optional bool update_disabled = 1; |
- |
- // Specifies the prefix of the target version we want the device to |
- // update to, if it's on a older version. If the device is already on |
- // a version with the given prefix, then there's no effect. If the device is |
- // on a higher version, it will remain on the higher version as we |
- // don't support rollback yet. The format of this version can be one |
- // of the following: |
- // --------------------------------------------------------------------- |
- // "" (or not set at all): update to latest version available. |
- // 1412.: update to any minor version of 1412 (e.g. 1412.24.34 or 1412.60.2) |
- // 1412.2.: update to any minor version of 1412.2 (e.g. 1412.2.34 or 1412.2.2) |
- // 1412.24.34: update to this specific version only |
- // --------------------------------------------------------------------- |
- optional string target_version_prefix = 2; |
- |
- // The Chrome browser version (e.g. "17.*") corresponding to the |
- // target_version_prefix above. The target_version_prefix is the internal OS |
- // version that external users normally are not aware of. This display_name |
- // can be used by the devices to display a message to end-users about the auto |
- // update setting. |
- optional string target_version_display_name = 3; |
- |
- // Specifies the number of seconds up to which a device may randomly |
- // delay its download of an update from the time the update was first pushed |
- // out to the server. The device may wait a portion of this time in terms |
- // of wall-clock-time and the remaining portion in terms of the number of |
- // update checks. In any case, the scatter is upper bounded by a constant |
- // amount of time so that a device does not ever get stuck waiting to download |
- // an update forever. |
- optional int64 scatter_factor_in_seconds = 4; |
- |
- // Enumerates network connection types. |
- enum ConnectionType { |
- CONNECTION_TYPE_ETHERNET = 0; |
- CONNECTION_TYPE_WIFI = 1; |
- CONNECTION_TYPE_WIMAX = 2; |
- CONNECTION_TYPE_BLUETOOTH = 3; |
- CONNECTION_TYPE_CELLULAR = 4; |
- } |
- |
- // The types of connections that are OK to use for OS updates. OS updates |
- // potentially put heavy strain on the connection due to their size and may |
- // incur additional cost. Therefore, they are by default not enabled for |
- // connection types that are considered expensive, which include WiMax, |
- // Bluetooth and Cellular at the moment. |
- repeated ConnectionType allowed_connection_types = 5; |
- |
- // True if the device should reboot automatically when an update has been |
- // applied and a reboot is required to complete the update process. |
- optional bool reboot_after_update = 6; |
-} |
- |
-message StartUpUrlsProto { |
- // Specifies the URLs to be loaded on login to the anonymous account used if |
- // the device is in RETAIL mode. |
- repeated string start_up_urls = 1; |
-} |
- |
-message SystemTimezoneProto { |
- // Specifies an owner-determined timezone that applies to the login screen and |
- // all users. Valid values are listed in "timezone_settings.cc". Additionally, |
- // timezones from the "IANA Time Zone Database" (e.g. listed on wikipedia) |
- // that are equivalent to one of the timezones in "timezone_settings.cc" are |
- // valid. In case of an invalid value, the setting is still activated with a |
- // fallback timezone (currently "GMT"). In case of an empty string or if no |
- // value is provided, the timezone device setting is inactive. In that case, |
- // the currently active timezone will remain in use however users can change |
- // the timezone and the change is persistent. Thus a change by one user |
- // affects the login-screen and all other users. |
- optional string timezone = 1; |
-} |
- |
-// Describes a single device-local account. |
-message DeviceLocalAccountInfoProto { |
- // Identifier for the device-local account. Account identifiers loosely follow |
- // the conventions for email addresses as specified by RFC 5322, e.g. local |
- // (user name) and domain parts, separated by the '@' character. |
- // Policy-configured device-local accounts are on the same domain that the |
- // device is enrolled to. In contrast to RFC 5322 (which is more restrictive), |
- // the local part may contain any characters other than '@'. |
- optional string id = 1; |
-} |
- |
-message DeviceLocalAccountsProto { |
- // The list of device-local accounts (i.e. accounts without an associated |
- // cloud-backed profile) that are available on the device. |
- repeated DeviceLocalAccountInfoProto account = 1; |
- |
- // The identifier of the device-local account to which the device |
- // should be logged in automatically. Should be equal to one of the |
- // ids in DeviceLocalAccountInfoProto. |
- optional string auto_login_id = 2; |
- |
- // The amount of time, in milliseconds, that should elapse at the signin |
- // screen without user interaction before automatically logging in. |
- optional int64 auto_login_delay = 3; |
-} |
- |
-message AllowRedeemChromeOsRegistrationOffersProto { |
- // Chrome OS Registration service provides way for chromeos device users |
- // to redeem electronic offers provided by service provider. |
- // This value determines if users are allowed to redeem offers through |
- // Chrome OS Registration service. |
- optional bool allow_redeem_offers = 1 [default = true]; |
-} |
- |
-message StartUpFlagsProto { |
- // The list of flags to be applied to chrome on start-up (back up store for |
- // owner set flags in about:flags). |
- repeated string flags = 1; |
-} |
- |
-message UptimeLimitProto { |
- // Sets the length of device uptime after which an automatic reboot is |
- // scheduled. An automatic reboot is scheduled at the selected time but may be |
- // delayed on the device by up to 24 hours, e.g. if a user is currently using |
- // the device or an app/extension has requested reboots to be inhibited |
- // temporarily. The policy value should be specified in seconds. |
- optional int64 uptime_limit = 1; |
-} |
- |
-message VariationsParameterProto { |
- // The string for the restrict parameter to be appended to the Variations URL |
- // when pinging the Variations server. |
- optional string parameter = 1; |
-} |
- |
-message AttestationSettingsProto { |
- // Attestation involves proving that a cryptographic key is protected by a |
- // legitimate Chrome OS TPM and reporting the operating mode of the platform. |
- // This setting enables attestation features at a device level. If this is |
- // enabled a machine key will be generated and certified by the Chrome OS |
- // CA. If this setting is disabled, the device will not communicate with the |
- // Chrome OS CA under any circumstances. Even users with attestation settings |
- // enabled will not be able to use those features on the device. |
- optional bool attestation_enabled = 1; |
-} |
- |
-message ChromeDeviceSettingsProto { |
- optional DevicePolicyRefreshRateProto device_policy_refresh_rate = 1; |
- optional UserWhitelistProto user_whitelist = 2; |
- optional GuestModeEnabledProto guest_mode_enabled = 3; |
- optional DeviceProxySettingsProto device_proxy_settings = 4; |
- optional CameraEnabledProto camera_enabled = 5; |
- optional ShowUserNamesOnSigninProto show_user_names = 6; |
- optional DataRoamingEnabledProto data_roaming_enabled = 7; |
- optional AllowNewUsersProto allow_new_users = 8; |
- optional MetricsEnabledProto metrics_enabled = 9; |
- optional ReleaseChannelProto release_channel = 10; |
- optional DeviceOpenNetworkConfigurationProto open_network_configuration = 11; |
- optional DeviceReportingProto device_reporting = 12; |
- optional EphemeralUsersEnabledProto ephemeral_users_enabled = 13; |
- optional AppPackProto app_pack = 14; |
- optional ForcedLogoutTimeoutsProto forced_logout_timeouts = 15; |
- optional ScreenSaverProto login_screen_saver = 16; |
- optional AutoUpdateSettingsProto auto_update_settings = 17; |
- optional StartUpUrlsProto start_up_urls = 18; |
- optional PinnedAppsProto pinned_apps = 19; |
- optional SystemTimezoneProto system_timezone = 20; |
- optional DeviceLocalAccountsProto device_local_accounts = 21; |
- optional AllowRedeemChromeOsRegistrationOffersProto allow_redeem_offers = 22; |
- optional StartUpFlagsProto start_up_flags = 23; |
- optional UptimeLimitProto uptime_limit = 24; |
- optional VariationsParameterProto variations_parameter = 25; |
- optional AttestationSettingsProto attestation_settings = 26; |
-} |