caption: Migration strategy for ecryptfs
deprecated: true
desc: |-
This policy was removed in M87 and home directories will automatically migrate to ext4 at sign-in.
Setting the policy specifies the action to take when the user's home directory was created with ecryptfs encryption. Unless ecryptfs-encrypted home directories migrate to ext4-encryption, Android apps might stop running.
Setting the policy to:
* Migrate (or an unsupported option such as AskUser or AskForEcryptfsArcUsers) means directories automatically migrate to ext4 at sign-in, without asking for user consent.
* Wipe or MinimalMigrate means that, at sign-in, new ext4-encrypted home directories replace old ecryptfs-encrypted directories. To help the user avoid repeated sign-ins, MinimalMigrate tries to preserve sign-in tokens.
* DisallowArc or leaving it unset prevents migration, and the user's Android apps stop running.
This policy doesn't apply to kiosk users.
Warning: Wipe and MinimalMigrate remove local data.
device_only: false
example_value: 2
features:
dynamic_refresh: false
per_profile: false
items:
- caption: Disallow data migration and ARC.
name: DisallowArc
value: 0
- caption: Migrate automatically, don’t ask for user consent.
name: Migrate
value: 1
- caption: Wipe the user’s ecryptfs home directory and start with a fresh ext4-encrypted
home directory.
name: Wipe
value: 2
- caption: Similar to Wipe (value 2), but tries to preserve login tokens so the user
does not have to sign in again.
name: MinimalMigrate
value: 4
owners:
- file://components/policy/OWNERS
- [email protected]
schema:
enum:
- 0
- 1
- 2
- 4
type: integer
supported_on:
- chrome_os:61-87
tags: []
type: int-enum