Policy implementation for encryptfs to ext4 migration strategy

chrome/browser/chromeos/policy/device_policy_decoder_chromeos.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/device_policy_decoder_chromeos.h"
 
 #include <limits>
 #include <string>
 
 #include "base/callback.h"
@@ skipping 365 matching lines @@
     std::unique_ptr<base::ListValue> input_methods(new base::ListValue);
     const em::LoginScreenInputMethodsProto& login_screen_input_methods(
         policy.login_screen_input_methods());
     for (const auto& input_method :
          login_screen_input_methods.login_screen_input_methods())
       input_methods->AppendString(input_method);
     policies->Set(key::kDeviceLoginScreenInputMethods, POLICY_LEVEL_MANDATORY,
                   POLICY_SCOPE_MACHINE, POLICY_SOURCE_CLOUD,
                   std::move(input_methods), nullptr);
   }
+
+  if (policy.has_device_ecryptfs_migration_strategy()) {
+    const em::DeviceEcryptfsMigrationStrategyProto& container(
+        policy.device_ecryptfs_migration_strategy());
+    if (container.has_migration_strategy()) {
+      policies->Set(
+          key::kDeviceEcryptfsMigrationStrategy, POLICY_LEVEL_MANDATORY,
+          POLICY_SCOPE_MACHINE, POLICY_SOURCE_CLOUD,
+          DecodeIntegerValue(container.migration_strategy()), nullptr);
+    }

[hidehiko, 2017/06/01 16:07:16]

What value should be set if has_migration_strategy() is false?

+  } else {
+    // Missing value means the migration is not allowed.
+    policies->Set(key::kDeviceEcryptfsMigrationStrategy, POLICY_LEVEL_MANDATORY,
+                  POLICY_SCOPE_MACHINE, POLICY_SOURCE_CLOUD,
+                  DecodeIntegerValue(
+                      enterprise_management::
+                          DeviceEcryptfsMigrationStrategyProto::DISALLOW_ARC),
+                  nullptr);
+  }
 }
 
 void DecodeNetworkPolicies(const em::ChromeDeviceSettingsProto& policy,
                            PolicyMap* policies) {
   if (policy.has_data_roaming_enabled()) {
     const em::DataRoamingEnabledProto& container(policy.data_roaming_enabled());
     if (container.has_data_roaming_enabled()) {
       policies->Set(
           key::kDeviceDataRoamingEnabled, POLICY_LEVEL_MANDATORY,
           POLICY_SCOPE_MACHINE, POLICY_SOURCE_CLOUD,
@@ skipping 480 matching lines @@
   // Decode the various groups of policies.
   DecodeLoginPolicies(policy, policies);
   DecodeNetworkPolicies(policy, policies);
   DecodeReportingPolicies(policy, policies);
   DecodeAutoUpdatePolicies(policy, policies);
   DecodeAccessibilityPolicies(policy, policies);
   DecodeGenericPolicies(policy, policies);
 }
 
 }  // namespace policy