Policy implementation for encryptfs to ext4 migration strategy

chrome/browser/chromeos/arc/arc_util.h

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_ARC_ARC_UTIL_H_
 #define CHROME_BROWSER_CHROMEOS_ARC_ARC_UTIL_H_
 
 #include <stdint.h>
 
 #include "base/callback_forward.h"
@@ skipping 21 matching lines @@
   // Migration has happend. New filesystem is in use.
   kFileSystemCompatible = 1,
   // Migration has happend, and a notification about the fact was already shown.
   kFileSystemCompatibleAndNotified = 2,
 
   // Existing code assumes that kFileSystemIncompatible is the only state
   // representing incompatibility and other values are all variants of
   // "compatible" state. Be careful in the case adding a new enum value.
 };
 
+// The state of device policy DeviceEcryptfsMigrationStrategy, that points if
+// the migration to ext4 encryption is allowed. The ext4 encryption is required
+// for ARC(N+).
+// TODO(igorcov): Remove this after migration. crbug.com/725493
+enum class ArcAvailabilityPolicyStatus {
+  // The policy value is unknown.
+  UNKNOWN = 0,
+  // ARC is disabled.
+  DISABLED = 1,
+  // ARC is available.
+  AVAILABLE = 2,
+};
+
 // Returns true if ARC is allowed to run for the given profile.
 // Otherwise, returns false, e.g. if the Profile is not for the primary user,
 // ARC is not available on the device, it is in the flow to set up managed
 // account creation.
 // nullptr can be safely passed to this function. In that case, returns false.
 bool IsArcAllowedForProfile(const Profile* profile);
 
 // Returns true if the profile is temporarily blocked to run ARC in the current
 // session, because the filesystem storing the profile is incomaptible with the
 // currently installed ARC version.
@@ skipping 53 matching lines @@
 bool AreArcAllOptInPreferencesManagedForProfile(const Profile* profile);
 
 // Checks and updates the preference value whether the underlying filesystem
 // for the profile is compatible with ARC, when necessary. After it's done (or
 // skipped), |callback| is run either synchronously or asynchronously.
 void UpdateArcFileSystemCompatibilityPrefIfNeeded(
     const AccountId& account_id,
     const base::FilePath& profile_path,
     const base::Closure& callback);
 
+// Getter for |arc_availability_policy_status|.
+ArcAvailabilityPolicyStatus GetArcAvailabilityPolicyStatus();

[hidehiko, 2017/06/07 12:22:20]

Can IsMigrationAllowed be usable directly?
I do not think callers do not want to take care about UNKNOWN.

[igorcov, 2017/06/08 10:42:25]

Good point, I've replaced it. Thank you.

+
+// For testing IsMigrationAllowed, the global flags have to be reset before
+// every test.
+void ResetGlobalDataForTesting();
+
 }  // namespace arc
 
 #endif  // CHROME_BROWSER_CHROMEOS_ARC_ARC_UTIL_H_