OLD | NEW |
---|---|
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/policy/user_cloud_policy_store_chromeos.h" | 5 #include "chrome/browser/chromeos/policy/user_cloud_policy_store_chromeos.h" |
6 | 6 |
7 #include <stddef.h> | 7 #include <stddef.h> |
8 #include <utility> | 8 #include <utility> |
9 | 9 |
10 #include "base/bind.h" | 10 #include "base/bind.h" |
11 #include "base/bind_helpers.h" | 11 #include "base/bind_helpers.h" |
12 #include "base/callback.h" | 12 #include "base/callback.h" |
13 #include "base/files/file_util.h" | 13 #include "base/files/file_util.h" |
14 #include "base/location.h" | 14 #include "base/location.h" |
15 #include "base/logging.h" | 15 #include "base/logging.h" |
16 #include "base/macros.h" | 16 #include "base/macros.h" |
17 #include "base/metrics/histogram_macros.h" | 17 #include "base/metrics/histogram_macros.h" |
18 #include "base/sequenced_task_runner.h" | 18 #include "base/sequenced_task_runner.h" |
19 #include "base/stl_util.h" | 19 #include "base/stl_util.h" |
20 #include "base/strings/stringprintf.h" | 20 #include "base/strings/stringprintf.h" |
21 #include "chrome/browser/chromeos/policy/user_policy_token_loader.h" | 21 #include "chrome/browser/chromeos/policy/user_policy_token_loader.h" |
22 #include "chrome/browser/lifetime/application_lifetime.h" | |
22 #include "chromeos/cryptohome/cryptohome_parameters.h" | 23 #include "chromeos/cryptohome/cryptohome_parameters.h" |
23 #include "chromeos/dbus/cryptohome_client.h" | 24 #include "chromeos/dbus/cryptohome_client.h" |
24 #include "chromeos/dbus/session_manager_client.h" | |
25 #include "components/policy/core/common/cloud/cloud_policy_constants.h" | 25 #include "components/policy/core/common/cloud/cloud_policy_constants.h" |
26 #include "components/policy/proto/cloud_policy.pb.h" | 26 #include "components/policy/proto/cloud_policy.pb.h" |
27 #include "components/policy/proto/device_management_local.pb.h" | 27 #include "components/policy/proto/device_management_local.pb.h" |
28 #include "google_apis/gaia/gaia_auth_util.h" | 28 #include "google_apis/gaia/gaia_auth_util.h" |
29 | 29 |
30 namespace em = enterprise_management; | 30 namespace em = enterprise_management; |
31 | 31 |
32 namespace policy { | 32 namespace policy { |
33 | 33 |
34 namespace { | 34 namespace { |
(...skipping 67 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
102 | 102 |
103 void UserCloudPolicyStoreChromeOS::LoadImmediately() { | 103 void UserCloudPolicyStoreChromeOS::LoadImmediately() { |
104 // This blocking D-Bus call is in the startup path and will block the UI | 104 // This blocking D-Bus call is in the startup path and will block the UI |
105 // thread. This only happens when the Profile is created synchronously, which | 105 // thread. This only happens when the Profile is created synchronously, which |
106 // on Chrome OS happens whenever the browser is restarted into the same | 106 // on Chrome OS happens whenever the browser is restarted into the same |
107 // session. That happens when the browser crashes, or right after signin if | 107 // session. That happens when the browser crashes, or right after signin if |
108 // the user has flags configured in about:flags. | 108 // the user has flags configured in about:flags. |
109 // However, on those paths we must load policy synchronously so that the | 109 // However, on those paths we must load policy synchronously so that the |
110 // Profile initialization never sees unmanaged prefs, which would lead to | 110 // Profile initialization never sees unmanaged prefs, which would lead to |
111 // data loss. http://crbug.com/263061 | 111 // data loss. http://crbug.com/263061 |
112 std::string policy_blob = | 112 std::string policy_blob; |
113 RetrievePolicyResponseType response_type = | |
113 session_manager_client_->BlockingRetrievePolicyForUser( | 114 session_manager_client_->BlockingRetrievePolicyForUser( |
114 cryptohome::Identification(account_id_)); | 115 cryptohome::Identification(account_id_), &policy_blob); |
116 | |
117 if (response_type == RetrievePolicyResponseType::SESSION_DOES_NOT_EXIST) { | |
118 LOG(ERROR) | |
119 << "Session manager claims that session doesn't exist; signing out"; | |
120 chrome::AttemptUserExit(); | |
121 return; | |
122 } | |
123 | |
115 if (policy_blob.empty()) { | 124 if (policy_blob.empty()) { |
116 // The session manager doesn't have policy, or the call failed. | 125 // The session manager doesn't have policy. |
emaxx
2017/04/24 16:37:50
nit: Please restore the original comment, given th
igorcov
2017/04/25 09:18:41
Done.
| |
117 NotifyStoreLoaded(); | 126 NotifyStoreLoaded(); |
118 return; | 127 return; |
119 } | 128 } |
120 | 129 |
121 std::unique_ptr<em::PolicyFetchResponse> policy( | 130 std::unique_ptr<em::PolicyFetchResponse> policy( |
122 new em::PolicyFetchResponse()); | 131 new em::PolicyFetchResponse()); |
123 if (!policy->ParseFromString(policy_blob)) { | 132 if (!policy->ParseFromString(policy_blob)) { |
124 status_ = STATUS_PARSE_ERROR; | 133 status_ = STATUS_PARSE_ERROR; |
125 NotifyStoreError(); | 134 NotifyStoreError(); |
126 return; | 135 return; |
(...skipping 80 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
207 } else { | 216 } else { |
208 // Load the policy right after storing it, to make sure it was accepted by | 217 // Load the policy right after storing it, to make sure it was accepted by |
209 // the session manager. An additional validation is performed after the | 218 // the session manager. An additional validation is performed after the |
210 // load; reload the key for that validation too, in case it was rotated. | 219 // load; reload the key for that validation too, in case it was rotated. |
211 ReloadPolicyKey(base::Bind(&UserCloudPolicyStoreChromeOS::Load, | 220 ReloadPolicyKey(base::Bind(&UserCloudPolicyStoreChromeOS::Load, |
212 weak_factory_.GetWeakPtr())); | 221 weak_factory_.GetWeakPtr())); |
213 } | 222 } |
214 } | 223 } |
215 | 224 |
216 void UserCloudPolicyStoreChromeOS::OnPolicyRetrieved( | 225 void UserCloudPolicyStoreChromeOS::OnPolicyRetrieved( |
217 const std::string& policy_blob) { | 226 const std::string& policy_blob, |
227 RetrievePolicyResponseType response_type) { | |
228 // Disallow the sign in when the Chrome OS user session has not started, which | |
229 // should always happen before the profile construction. An attempt to read | |
230 // the policy outside the session will always fail and return an empty policy | |
231 // blob. | |
232 if (response_type == RetrievePolicyResponseType::SESSION_DOES_NOT_EXIST) { | |
233 LOG(ERROR) | |
234 << "Session manager claims that session doesn't exist; signing out"; | |
235 chrome::AttemptUserExit(); | |
236 return; | |
237 } | |
238 | |
218 if (policy_blob.empty()) { | 239 if (policy_blob.empty()) { |
219 // session_manager doesn't have policy. Adjust internal state and notify | 240 // session_manager doesn't have policy. Adjust internal state and notify |
220 // the world about the policy update. | 241 // the world about the policy update. |
221 policy_map_.Clear(); | 242 policy_map_.Clear(); |
222 policy_.reset(); | 243 policy_.reset(); |
223 policy_signature_public_key_.clear(); | 244 policy_signature_public_key_.clear(); |
224 NotifyStoreLoaded(); | 245 NotifyStoreLoaded(); |
225 return; | 246 return; |
226 } | 247 } |
227 | 248 |
(...skipping 147 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
375 validator->ValidateUsername(account_id_.GetUserEmail(), true); | 396 validator->ValidateUsername(account_id_.GetUserEmail(), true); |
376 // The policy loaded from session manager need not be validated using the | 397 // The policy loaded from session manager need not be validated using the |
377 // verification key since it is secure, and since there may be legacy policy | 398 // verification key since it is secure, and since there may be legacy policy |
378 // data that was stored without a verification key. | 399 // data that was stored without a verification key. |
379 validator->ValidateSignature(cached_policy_key_); | 400 validator->ValidateSignature(cached_policy_key_); |
380 } | 401 } |
381 return validator; | 402 return validator; |
382 } | 403 } |
383 | 404 |
384 } // namespace policy | 405 } // namespace policy |
OLD | NEW |