caption: Allow unaffiliated users to use Crostini
default: true
desc: Setting the policy to Enabled or leaving it unset lets all users use <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>
as long as all 3 policies, <ph name="VIRTUAL_MACHINES_ALLOWED_POLICY_NAME">VirtualMachinesAllowed</ph>,
<ph name="CROSTINI_ALLOWED_POLICY_NAME">CrostiniAllowed</ph>, and <ph name="DEVICE_UNAFFILIATED_CROSTINI_ALLOWED_POLICY_NAME">DeviceUnaffiliatedCrostiniAllowed</ph>
are set to Enabled. Setting the policy to Disabled means unaffiliated users can't
use <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>. Changing it to Disabled starts
applying the policy to starting new <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>
containers, not those already running.
device_only: true
example_value: false
features:
dynamic_refresh: true
items:
- caption: Allow unaffiliated users to use virtual machines needed to support Linux
apps
value: true
- caption: Do not allow unaffiliated users to use virtual machines needed to support
Linux apps
value: false
owners:
- [email protected]
- [email protected]
schema:
type: boolean
supported_on:
- chrome_os:70-
tags:
- system-security
type: main
generate_device_proto: False