| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 syntax = "proto2"; | 5 syntax = "proto2"; |
| 6 | 6 |
| 7 option optimize_for = LITE_RUNTIME; | 7 option optimize_for = LITE_RUNTIME; |
| 8 | 8 |
| 9 package enterprise_management; | 9 package enterprise_management; |
| 10 | 10 |
| (...skipping 437 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 448 | 448 |
| 449 // If the public key has been rotated on the server, the new public | 449 // If the public key has been rotated on the server, the new public |
| 450 // key is sent here. It is already used for |policy_data_signature| | 450 // key is sent here. It is already used for |policy_data_signature| |
| 451 // above, whereas |new_public_key_signature| is created using the | 451 // above, whereas |new_public_key_signature| is created using the |
| 452 // old key (so the client can trust the new key). If this is the | 452 // old key (so the client can trust the new key). If this is the |
| 453 // first time when the client requests policies (so it doesn't have | 453 // first time when the client requests policies (so it doesn't have |
| 454 // on old public key), then |new_public_key_signature| is empty. | 454 // on old public key), then |new_public_key_signature| is empty. |
| 455 optional bytes new_public_key = 5; | 455 optional bytes new_public_key = 5; |
| 456 optional bytes new_public_key_signature = 6; | 456 optional bytes new_public_key_signature = 6; |
| 457 | 457 |
| 458 // DEPRECATED ON THE SERVER: Exists only to support older clients. This | 458 // DEPRECATED: Exists only to support older clients. This signature is similar |
| 459 // signature is similar to new_public_key_verification_data_signature, but is | 459 // to new_public_key_verification_data_signature, but is computed over |
| 460 // computed over PublicKeyVerificationData proto with version field unset. In | 460 // PublicKeyVerificationData proto with version field unset. |
| 461 // other words, we set the new public key value, and domain value and then | 461 // In other words, DMServer sets the new public key value, and domain value |
| 462 // produce this signature. | 462 // and then produces this signature. |
| 463 optional bytes new_public_key_verification_signature = 7; | 463 optional bytes new_public_key_verification_signature_deprecated = 7 |
| 464 [deprecated = true]; |
| 464 | 465 |
| 465 // This is a serialized |PublicKeyVerificationData| protobuf | 466 // This is a serialized |PublicKeyVerificationData| protobuf |
| 466 // (defined above). See comments for |new_public_key_verification_signature| | 467 // (defined above). See comments for |new_public_key_verification_signature| |
| 467 // field for details on how this data is signed. | 468 // field for details on how this data is signed. |
| 468 // Please note that |new_public_key| is also included inside this data | 469 // Please note that |new_public_key| is also included inside this data |
| 469 // field. Thus we have new public key signed with old version of private key | 470 // field. Thus we have new public key signed with old version of private key |
| 470 // (if client indicated to us that it has old key version), and | 471 // (if client indicated to us that it has old key version), and |
| 471 // new public key data signed by master verification key (if client told | 472 // new public key data signed by master verification key (if client told |
| 472 // us that it has public verification key - see |verification_key_id| field | 473 // us that it has public verification key - see |verification_key_id| field |
| 473 // of |PolicyFetchRequest|). In most cases, both signatures will be provided. | 474 // of |PolicyFetchRequest|). In most cases, both signatures will be provided. |
| (...skipping 18 matching lines...) Expand all Loading... |
| 492 // client). If DMServer is unable to find matching key, it returns an error | 493 // client). If DMServer is unable to find matching key, it returns an error |
| 493 // instead of policy data. In case a hash was not specified, DMServer leaves | 494 // instead of policy data. In case a hash was not specified, DMServer leaves |
| 494 // the verification signature field empty (legacy behavior). | 495 // the verification signature field empty (legacy behavior). |
| 495 // This signature is provided to better protect first key delivery (since the | 496 // This signature is provided to better protect first key delivery (since the |
| 496 // browser does not possess the previous signing key, DMServer cannot compute | 497 // browser does not possess the previous signing key, DMServer cannot compute |
| 497 // new_public_key_signature). | 498 // new_public_key_signature). |
| 498 // See http://go/chrome-nac-server-design for more information. | 499 // See http://go/chrome-nac-server-design for more information. |
| 499 optional bytes new_public_key_verification_data_signature = 9; | 500 optional bytes new_public_key_verification_data_signature = 9; |
| 500 } | 501 } |
| 501 | 502 |
| 502 // DEPRECATED ON THE SERVER: Protobuf used to generate the deprecated | 503 // DEPRECATED: Protobuf used to generate the deprecated |
| 503 // new_public_key_verification_signature field. | 504 // new_public_key_verification_signature field. |
| 504 message PolicyPublicKeyAndDomain { | 505 message DEPRECATEDPolicyPublicKeyAndDomain { |
| 505 // The public key to sign (taken from the |new_public_key| field in | 506 // The public key to sign (taken from the |new_public_key| field in |
| 506 // PolicyFetchResponse). | 507 // PolicyFetchResponse). |
| 507 optional bytes new_public_key = 1; | 508 optional bytes new_public_key = 1; |
| 508 | 509 |
| 509 // The domain associated with this key (should match the domain portion of | 510 // The domain associated with this key (should match the domain portion of |
| 510 // the username field of the policy). | 511 // the username field of the policy). |
| 511 optional string domain = 2; | 512 optional string domain = 2; |
| 512 } | 513 } |
| 513 | 514 |
| 514 // Request from device to server for reading policies. | 515 // Request from device to server for reading policies. |
| (...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 548 optional TimePeriod duration = 2; | 549 optional TimePeriod duration = 2; |
| 549 | 550 |
| 550 // Client will send at most 50 timestamps to DM. All the rest | 551 // Client will send at most 50 timestamps to DM. All the rest |
| 551 // launch activities will be summed into the total count. | 552 // launch activities will be summed into the total count. |
| 552 // We will distribute the count evenly among the time span when | 553 // We will distribute the count evenly among the time span when |
| 553 // doing time based aggregation. | 554 // doing time based aggregation. |
| 554 repeated int64 timestamp = 3; | 555 repeated int64 timestamp = 3; |
| 555 optional int64 total_count = 4; | 556 optional int64 total_count = 4; |
| 556 } | 557 } |
| 557 | 558 |
| 558 // Used to report the device location. | 559 // OBSOLETE: Used to report the device location. |
| 559 message OBSOLETE_DeviceLocation { | 560 message OBSOLETE_DeviceLocation { |
| 560 enum ErrorCode { | 561 enum ErrorCode { |
| 561 ERROR_CODE_NONE = 0; | 562 ERROR_CODE_NONE = 0; |
| 562 ERROR_CODE_POSITION_UNAVAILABLE = 1; | 563 ERROR_CODE_POSITION_UNAVAILABLE = 1; |
| 563 } | 564 } |
| 564 | 565 |
| 565 // Latitude in decimal degrees north (WGS84 coordinate frame). | 566 // Latitude in decimal degrees north (WGS84 coordinate frame). |
| 566 optional double latitude = 1; | 567 optional double latitude = 1; |
| 567 | 568 |
| 568 // Longitude in decimal degrees west (WGS84 coordinate frame). | 569 // Longitude in decimal degrees west (WGS84 coordinate frame). |
| (...skipping 129 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 698 message DeviceStatusReportRequest { | 699 message DeviceStatusReportRequest { |
| 699 // The OS version reported by the device is a platform version | 700 // The OS version reported by the device is a platform version |
| 700 // e.g. 1435.0.2011_12_16_1635. | 701 // e.g. 1435.0.2011_12_16_1635. |
| 701 optional string os_version = 1; | 702 optional string os_version = 1; |
| 702 optional string firmware_version = 2; | 703 optional string firmware_version = 2; |
| 703 | 704 |
| 704 // "Verified", "Dev". Same as verified mode. | 705 // "Verified", "Dev". Same as verified mode. |
| 705 // If the mode is unknown, this field should not be set. | 706 // If the mode is unknown, this field should not be set. |
| 706 optional string boot_mode = 3; | 707 optional string boot_mode = 3; |
| 707 | 708 |
| 708 // Device active times collection since last report rpc call. | 709 // OBSOLETE: Device active times collection since last report rpc call. |
| 709 // No longer used -- use active_period instead. | 710 // No longer used -- use active_period instead. |
| 710 repeated TimePeriod OBSOLETE_active_time = 4 [deprecated = true]; | 711 repeated TimePeriod OBSOLETE_active_time = 4 [deprecated = true]; |
| 711 | 712 |
| 712 // The browser version string as shown in the About dialog. | 713 // The browser version string as shown in the About dialog. |
| 713 // e.g. 17.0.963.18. | 714 // e.g. 17.0.963.18. |
| 714 optional string browser_version = 5; | 715 optional string browser_version = 5; |
| 715 | 716 |
| 716 // A list of periods when the device was active, aggregated by day. | 717 // A list of periods when the device was active, aggregated by day. |
| 717 repeated ActiveTimePeriod active_period = 6; | 718 repeated ActiveTimePeriod active_period = 6; |
| 718 | 719 |
| 719 // The device location. | 720 // OBSOLETE: The device location. |
| 720 optional OBSOLETE_DeviceLocation OBSOLETE_device_location = 7 [deprecated = tr
ue]; | 721 optional OBSOLETE_DeviceLocation OBSOLETE_device_location = 7 |
| 722 [deprecated = true]; |
| 721 | 723 |
| 722 // List of network interfaces. | 724 // List of network interfaces. |
| 723 repeated NetworkInterface network_interface = 8; | 725 repeated NetworkInterface network_interface = 8; |
| 724 | 726 |
| 725 // List of recent device users, in descending order by last login time. | 727 // List of recent device users, in descending order by last login time. |
| 726 repeated DeviceUser user = 9; | 728 repeated DeviceUser user = 9; |
| 727 | 729 |
| 728 // Disk space + other info about mounted/connected volumes. | 730 // Disk space + other info about mounted/connected volumes. |
| 729 repeated VolumeInfo volume_info = 10; | 731 repeated VolumeInfo volume_info = 10; |
| 730 | 732 |
| 731 // List of visible/configured networks | 733 // List of visible/configured networks |
| 732 repeated NetworkState network_state = 11; | 734 repeated NetworkState network_state = 11; |
| 733 | 735 |
| 734 // Samples of CPU utilization (0-100), sampled once every 120 seconds. | 736 // Samples of CPU utilization (0-100), sampled once every 120 seconds. |
| 735 repeated int32 cpu_utilization_pct = 12; | 737 repeated int32 cpu_utilization_pct = 12; |
| 736 | 738 |
| 737 // Free RAM (unreliable due to GC). | 739 // OBSOLETE: Free RAM (unreliable due to GC). |
| 738 optional int64 OBSOLETE_system_ram_free = 13 [deprecated = true]; | 740 optional int64 OBSOLETE_system_ram_free = 13 [deprecated = true]; |
| 739 | 741 |
| 740 // Total RAM on the device. | 742 // Total RAM on the device. |
| 741 optional int64 system_ram_total = 14; | 743 optional int64 system_ram_total = 14; |
| 742 | 744 |
| 743 // Samples of free RAM [in bytes] (unreliable due to GC). | 745 // Samples of free RAM [in bytes] (unreliable due to GC). |
| 744 repeated int64 system_ram_free = 15; | 746 repeated int64 system_ram_free = 15; |
| 745 | 747 |
| 746 // Samples of CPU temperatures in Celsius, plus associated labels | 748 // Samples of CPU temperatures in Celsius, plus associated labels |
| 747 // identifying which CPU produced the temperature measurement. | 749 // identifying which CPU produced the temperature measurement. |
| (...skipping 50 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 798 | 800 |
| 799 message AndroidStatus { | 801 message AndroidStatus { |
| 800 // JSON string of ARC status report. | 802 // JSON string of ARC status report. |
| 801 optional string status_payload = 1; | 803 optional string status_payload = 1; |
| 802 // DroidGuard response obtained from DroidGuard server. | 804 // DroidGuard response obtained from DroidGuard server. |
| 803 optional string droid_guard_info = 2; | 805 optional string droid_guard_info = 2; |
| 804 } | 806 } |
| 805 | 807 |
| 806 // Report current active session (a user on one device) level status. | 808 // Report current active session (a user on one device) level status. |
| 807 message SessionStatusReportRequest { | 809 message SessionStatusReportRequest { |
| 808 // Installed apps for this user on this device. | 810 // OBSOLETE: Installed apps for this user on this device. |
| 809 // No longer used -- use installed_apps instead. | 811 // No longer used -- use installed_apps instead. |
| 810 repeated string OBSOLETE_installed_app_id = 1 [deprecated = true]; | 812 repeated string OBSOLETE_installed_app_id = 1 [deprecated = true]; |
| 811 | 813 |
| 812 // Installed extensions for this user on this device. | 814 // OBSOLETE: Installed extensions for this user on this device. |
| 813 // No longer used -- use installed_extensions instead. | 815 // No longer used -- use installed_extensions instead. |
| 814 repeated string OBSOLETE_installed_extension_id = 2 [deprecated = true]; | 816 repeated string OBSOLETE_installed_extension_id = 2 [deprecated = true]; |
| 815 | 817 |
| 816 // One stat per app for top 30 apps. | 818 // One stat per app for top 30 apps. |
| 817 repeated InstallableLaunch app_launch_stat = 3; | 819 repeated InstallableLaunch app_launch_stat = 3; |
| 818 | 820 |
| 819 // If this is a kiosk session, this is the device local account ID. | 821 // If this is a kiosk session, this is the device local account ID. |
| 820 optional string device_local_account_id = 4; | 822 optional string device_local_account_id = 4; |
| 821 | 823 |
| 822 // Information about installed apps for this user on this device. | 824 // Information about installed apps for this user on this device. |
| (...skipping 215 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 1038 // Reboot the device. | 1040 // Reboot the device. |
| 1039 DEVICE_REBOOT = 0; | 1041 DEVICE_REBOOT = 0; |
| 1040 | 1042 |
| 1041 // Take a screenshot. | 1043 // Take a screenshot. |
| 1042 DEVICE_SCREENSHOT = 1; | 1044 DEVICE_SCREENSHOT = 1; |
| 1043 } | 1045 } |
| 1044 | 1046 |
| 1045 // The command type. | 1047 // The command type. |
| 1046 optional Type type = 1; | 1048 optional Type type = 1; |
| 1047 | 1049 |
| 1048 // An opaque unique identifier for the command. | 1050 // An opaque unique identifier for the command. The client processes |
| 1049 optional int64 unique_id = 2; | 1051 // the commands in the order of the command list it receives. |
| 1052 optional int64 command_id = 2; |
| 1050 | 1053 |
| 1051 // The age of the command (in milliseconds) when it is sent from server to | 1054 // The age of the command (in milliseconds) when it is sent from server to |
| 1052 // client, defined as current_server_time - command_generated_time. | 1055 // client, defined as current_server_time - command_generated_time. |
| 1053 optional int64 age_of_command = 3; | 1056 optional int64 age_of_command = 3; |
| 1054 | 1057 |
| 1055 // Extra parameters for this command, expected to be a JSON string. | 1058 // Extra parameters for this command, expected to be a JSON string. |
| 1059 // If the command type is DEVICE_SCREENSHOT, the format of the JSON payload |
| 1060 // is: {"fileUploadUrl" : url_string} |
| 1056 optional string payload = 4; | 1061 optional string payload = 4; |
| 1057 } | 1062 } |
| 1058 | 1063 |
| 1059 // This protobuf defines the execution result of a single remote command | 1064 // This protobuf defines the execution result of a single remote command |
| 1060 // which will be sent back to the server. | 1065 // which will be sent back to the server. |
| 1061 message RemoteCommandResult { | 1066 message RemoteCommandResult { |
| 1062 enum ResultType { | 1067 enum ResultType { |
| 1063 RESULT_IGNORED = 0; // The command was ignored as obsolete. | 1068 RESULT_IGNORED = 0; // The command was ignored as obsolete. |
| 1064 RESULT_FAILURE = 1; // The command could not be executed. | 1069 RESULT_FAILURE = 1; // The command could not be executed. |
| 1065 RESULT_SUCCESS = 2; // The command was successfully executed. | 1070 RESULT_SUCCESS = 2; // The command was successfully executed. |
| 1066 } | 1071 } |
| 1067 | 1072 |
| 1068 // The result of the command. | 1073 // The result of the command. |
| 1069 optional ResultType result = 1; | 1074 optional ResultType result = 1; |
| 1070 | 1075 |
| 1071 // The opaque unique identifier of the command. This value is copied from the | 1076 // The opaque unique identifier of the command. This value is copied from the |
| 1072 // RemoteCommand protobuf that contained the command. | 1077 // RemoteCommand protobuf that contained the command. |
| 1073 optional int64 unique_id = 2; | 1078 optional int64 command_id = 2; |
| 1074 | 1079 |
| 1075 // The time at which the command was executed, if the the result is | 1080 // The time at which the command was executed, if the the result is |
| 1076 // RESULT_SUCCESS. | 1081 // RESULT_SUCCESS. |
| 1077 optional int64 timestamp = 3; | 1082 optional int64 timestamp = 3; |
| 1078 | 1083 |
| 1079 // Extra information sent to server as result of execution, expected to be a | 1084 // Extra information sent to server as result of execution, expected to be a |
| 1080 // JSON string. | 1085 // JSON string. |
| 1081 optional string payload = 4; | 1086 optional string payload = 4; |
| 1082 } | 1087 } |
| 1083 | 1088 |
| (...skipping 317 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 1401 // Response to update device attribute. | 1406 // Response to update device attribute. |
| 1402 optional DeviceAttributeUpdateResponse device_attribute_update_response = 16; | 1407 optional DeviceAttributeUpdateResponse device_attribute_update_response = 16; |
| 1403 | 1408 |
| 1404 // Response to GCM id update request. | 1409 // Response to GCM id update request. |
| 1405 optional GcmIdUpdateResponse gcm_id_update_response = 17; | 1410 optional GcmIdUpdateResponse gcm_id_update_response = 17; |
| 1406 | 1411 |
| 1407 // Response to check Android management request. | 1412 // Response to check Android management request. |
| 1408 optional CheckAndroidManagementResponse | 1413 optional CheckAndroidManagementResponse |
| 1409 check_android_management_response = 18; | 1414 check_android_management_response = 18; |
| 1410 } | 1415 } |
| OLD | NEW |