| OLD | NEW |
| 1 { | 1 { |
| 2 # policy_templates.json - Metafile for policy templates | 2 # policy_templates.json - Metafile for policy templates |
| 3 # | 3 # |
| 4 # The content of this file is evaluated as a Python expression. | 4 # The content of this file is evaluated as a Python expression. |
| 5 # | 5 # |
| 6 # This file is used as input to generate the following policy templates: | 6 # This file is used as input to generate the following policy templates: |
| 7 # ADM, ADMX+ADML, MCX/plist and html documentation. | 7 # ADM, ADMX+ADML, MCX/plist and html documentation. |
| 8 # | 8 # |
| 9 # Policy templates are user interface definitions or documents about the | 9 # Policy templates are user interface definitions or documents about the |
| 10 # policies that can be used to configure Chrome. Each policy is a name-value | 10 # policies that can be used to configure Chrome. Each policy is a name-value |
| (...skipping 7465 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 7476 'features': { | 7476 'features': { |
| 7477 'dynamic_refresh': True, | 7477 'dynamic_refresh': True, |
| 7478 }, | 7478 }, |
| 7479 'device_only': True, | 7479 'device_only': True, |
| 7480 'example_value': True, | 7480 'example_value': True, |
| 7481 'id': 207, | 7481 'id': 207, |
| 7482 'caption': '''Enable remote attestation for the device''', | 7482 'caption': '''Enable remote attestation for the device''', |
| 7483 'tags': [], | 7483 'tags': [], |
| 7484 'desc': '''If true, remote attestation is allowed for the device and a
certificate will automatically be generated and uploaded to the Device Manageme
nt Server. | 7484 'desc': '''If true, remote attestation is allowed for the device and a
certificate will automatically be generated and uploaded to the Device Manageme
nt Server. |
| 7485 | 7485 |
| 7486 If it is set to false, or if it is not set, no certificate will be gen
erated and calls to the enterprise.platformKeysPrivate extension API will fail.'
'', | 7486 If it is set to false, or if it is not set, no certificate will be gen
erated and calls to the enterprise.platformKeys extension API will fail.''', |
| 7487 }, | 7487 }, |
| 7488 { | 7488 { |
| 7489 'name': 'AttestationEnabledForUser', | 7489 'name': 'AttestationEnabledForUser', |
| 7490 'type': 'main', | 7490 'type': 'main', |
| 7491 'schema': { 'type': 'boolean' }, | 7491 'schema': { 'type': 'boolean' }, |
| 7492 'supported_on': ['chrome_os:28-'], | 7492 'supported_on': ['chrome_os:28-'], |
| 7493 'features': { | 7493 'features': { |
| 7494 'dynamic_refresh': True, | 7494 'dynamic_refresh': True, |
| 7495 'per_profile': True, | 7495 'per_profile': True, |
| 7496 }, | 7496 }, |
| 7497 'example_value': True, | 7497 'example_value': True, |
| 7498 'id': 200, | 7498 'id': 200, |
| 7499 'caption': '''Enable remote attestation for the user''', | 7499 'caption': '''Enable remote attestation for the user''', |
| 7500 'tags': [], | 7500 'tags': [], |
| 7501 'desc': '''If true, the user can use the hardware on Chrome devices to
remote attest its identity to the privacy CA via the Enterprise Platform Keys A
PI chrome.enterprise.platformKeysPrivate.challengeUserKey(). | 7501 'desc': '''If true, the user can use the hardware on Chrome devices to
remote attest its identity to the privacy CA via the Enterprise Platform Keys A
PI chrome.enterprise.platformKeys.challengeUserKey(). |
| 7502 | 7502 |
| 7503 If it is set to false, or if it is not set, calls to the API will fail
with an error code.''', | 7503 If it is set to false, or if it is not set, calls to the API will fail
with an error code.''', |
| 7504 }, | 7504 }, |
| 7505 { | 7505 { |
| 7506 'name': 'AttestationExtensionWhitelist', | 7506 'name': 'AttestationExtensionWhitelist', |
| 7507 'type': 'list', | 7507 'type': 'list', |
| 7508 'schema': { | 7508 'schema': { |
| 7509 'type': 'array', | 7509 'type': 'array', |
| 7510 'items': { 'type': 'string' }, | 7510 'items': { 'type': 'string' }, |
| 7511 }, | 7511 }, |
| 7512 'supported_on': ['chrome_os:28-'], | 7512 'supported_on': ['chrome_os:28-'], |
| 7513 'features': { | 7513 'features': { |
| 7514 'dynamic_refresh': True, | 7514 'dynamic_refresh': True, |
| 7515 'per_profile': True, | 7515 'per_profile': True, |
| 7516 }, | 7516 }, |
| 7517 'example_value': ['ghdilpkmfbfdnomkmaiogjhjnggaggoi'], | 7517 'example_value': ['ghdilpkmfbfdnomkmaiogjhjnggaggoi'], |
| 7518 'id': 201, | 7518 'id': 201, |
| 7519 'caption': '''Extensions allowed to to use the remote attestation API'
'', | 7519 'caption': '''Extensions allowed to to use the remote attestation API'
'', |
| 7520 'tags': [], | 7520 'tags': [], |
| 7521 'desc': '''This policy specifies the allowed extensions to use Enterpr
ise Platform Keys API chrome.enterprise.platformKeysPrivate.challengeUserKey() f
or remote attestation. Extensions must be added to this list to use the API. | 7521 'desc': '''This policy specifies the allowed extensions to use Enterpr
ise Platform Keys API chrome.enterprise.platformKeys.challengeUserKey() for remo
te attestation. Extensions must be added to this list to use the API. |
| 7522 | 7522 |
| 7523 If an extension is not in the list, or the list is not set, the call t
o the API will fail with an error code.''', | 7523 If an extension is not in the list, or the list is not set, the call t
o the API will fail with an error code.''', |
| 7524 }, | 7524 }, |
| 7525 { | 7525 { |
| 7526 'name': 'AttestationForContentProtectionEnabled', | 7526 'name': 'AttestationForContentProtectionEnabled', |
| 7527 'type': 'main', | 7527 'type': 'main', |
| 7528 'schema': { 'type': 'boolean' }, | 7528 'schema': { 'type': 'boolean' }, |
| 7529 'supported_on': ['chrome_os:31-'], | 7529 'supported_on': ['chrome_os:31-'], |
| 7530 'features': { | 7530 'features': { |
| 7531 'dynamic_refresh': True, | 7531 'dynamic_refresh': True, |
| (...skipping 1675 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 9207 'desc': '''Text appended in parentheses next to the policies top-level con
tainer to indicate that those policies are of the Recommended level''', | 9207 'desc': '''Text appended in parentheses next to the policies top-level con
tainer to indicate that those policies are of the Recommended level''', |
| 9208 'text': 'Default Settings (users can override)', | 9208 'text': 'Default Settings (users can override)', |
| 9209 }, | 9209 }, |
| 9210 'doc_complex_policies_on_windows': { | 9210 'doc_complex_policies_on_windows': { |
| 9211 'desc': '''Text pointing the user to a help article for complex policies o
n Windows''', | 9211 'desc': '''Text pointing the user to a help article for complex policies o
n Windows''', |
| 9212 'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POL
ICIES_URL">https://www.chromium.org/administrators/complex-policies-on-windows<e
x>https://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>'
'', | 9212 'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POL
ICIES_URL">https://www.chromium.org/administrators/complex-policies-on-windows<e
x>https://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>'
'', |
| 9213 }, | 9213 }, |
| 9214 }, | 9214 }, |
| 9215 'placeholders': [], | 9215 'placeholders': [], |
| 9216 } | 9216 } |
| OLD | NEW |