1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
|
// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// This features file defines switches used to control Extension behaviour,
// typically allowlist configuration.
// Note, the features defined here are generally ignored for the purposes of
// extension documentation.
// See chrome/common/extensions/api/_features.md to understand this file, as
// well as feature.h, simple_feature.h, and feature_provider.h.
{
"zoom_without_bubble": {
"channel": "stable",
"extension_types": ["extension"],
"allowlist": [
"CBCC42ABED43A4B58FE3810E62AFFA010EB0349F" // https://crbug.com/538252
]
},
"allow_usb_devices_permission_interface_class": {
"channel": "stable",
"extension_types": ["platform_app"],
"session_types": ["kiosk"]
},
"signin_screen": [ {
"channel": "canary",
"component_extensions_auto_granted": false,
"platforms": ["chromeos"],
"location": "unpacked",
"allowlist": [
"05D1DBD6E8B9C4690FFA7D50E6F60C5290DC662A" // crbug.com/941107
]
}, {
// Strict restrictions for stable channel.
// For now only allowlisted apps.
"channel": "stable",
"component_extensions_auto_granted": false,
"extension_types": ["platform_app"],
"location": "policy",
"platforms": ["chromeos"],
"allowlist": [
// https://crbug.com/626342
"85DA1AC24AF23CDA9F5A19858EB9C6E9E1BA57F6", // Sign-in Screen Test App
"EC3DE21E048B67319893889529354DFBFA96FD23", // https://crbug.com/1233881
"A19608AC34215B127FF9D7C006D67F5C8ED8146D", // https://crbug.com/1233881
"6B748A5C005F21B7CBCF4170C2F883E435DEB511", // DriveLock Smart Card Middleware
// http://b/297940831
"D95D50CDFE6F14769DA2D1E59DF853BFA56BFC3C" // Net iD for Chrome OS
]
}, {
"channel": "stable",
"component_extensions_auto_granted": false,
"extension_types": ["login_screen_extension"],
"location": "policy",
"platforms": ["chromeos"],
"allowlist": [
"93B7178E8C275515C38D4F43D9DF4648F0EA9B03", // Identity Card Connector
"EC3DE21E048B67319893889529354DFBFA96FD23", // https://crbug.com/1233881
"A19608AC34215B127FF9D7C006D67F5C8ED8146D", // https://crbug.com/1233881
// https://crbug.com/1194693
"6B748A5C005F21B7CBCF4170C2F883E435DEB511", // DriveLock Smart Card Middleware
"075FF17D52ED6E3C2E5EC4D99F188E7A25AF47EA", // Beta DriveLock Smart Card Middleware
// http://b/297940831
"D95D50CDFE6F14769DA2D1E59DF853BFA56BFC3C", // Net iD for Chrome OS
"5C825E850034490380BCB756D43ABB2CF537AA91", // https://crbug.com/359290130
// https://crbug.com/383855830
"1FC31C9D42DF1B51EA7648F73DF26400322999A8", // IDmelon Accesskey
// https://crbug.com/433867146
"4B7E9789426EBD1BB3F99D72690DAE303FC042DF" // AuthX Secure for ChromeOS
]
}, {
// Explicitly allowlist extensions that should always be available
// on a sign-in screen. Mind that some of them will be closed when signin is
// performed. See for reference |kNonRiskyExtensionsIdsHashes| in
// chrome/browser/ash/profiles/profile_helper.cc.
"channel": "stable",
"component_extensions_auto_granted": false,
"platforms": ["chromeos"],
"allowlist": [
// https://crbug.com/626342
"E24F1786D842E91E74C27929B0B3715A4689A473", // Gnubby component extension
"6F9E349A0561C78A0D3F41496FE521C5151C7F71", // Gnubby app
"8EBDF73405D0B84CEABB8C7513C9B9FA9F1DC2CE", // Genius app (help)
"06BE211D5F014BAB34BC22D9DDA09C63A81D828E", // Chrome OS XKB
"3F50C3A83839D9C76334BCE81CDEC06174F266AF", // Virtual Keyboard
"2F47B526FA71F44816618C41EC55E5EE9543FDCC", // Braille Keyboard
"86672C8D7A04E24EFB244BF96FE518C4C4809F73", // Speech synthesis
"1CF709D51B2B96CF79D00447300BD3BFBE401D21", // Mobile activation
"40FF1103292F40C34066E023B8BE8CAE18306EAE", // Chromeos help
"3C654B3B6682CA194E75AD044CEDE927675DDEE8", // Easy unlock
"2FCBCE08B34CCA1728A85F1EFBD9A34DD2558B2E", // Screen Reader
"7910EAFDAF64B947E1CB31B333A9BD14CA556B6C", // Feedback extension
"75C7F4B720314B6CB1B5817CD86089DB95CD2461", // ChromeVox
"0681F449CC5742B51148D9968C2C38B7396184A7" // eSpeakNG
]
},
// Extensions that are force-installed on the login screen through policy will
// receive type "login_screen_extension" and have limited API capabilities.
// Nonetheless, we only allow specifically allowlisted extensions here.
{
"channel": "stable",
"component_extensions_auto_granted": false,
"extension_types": ["login_screen_extension"],
"location": "policy",
"platforms": ["chromeos"],
"allowlist": [
"FA84F98B32AFC3013F5711F8711F8F38DB210AB7", // Sign-in Screen Test Extension
"7FE4A999359A456C4B0FB7B7AD85CEA29CA50519" // Login screen APIs test extension
]
}, {
"channel": "stable",
"component_extensions_auto_granted": false,
"dependencies": ["behavior:imprivata_login_screen_extension"],
"extension_types": ["login_screen_extension"],
"location": "policy",
"platforms": ["chromeos"]
}],
"allow_secondary_kiosk_app_enabled_on_launch": {
"channel": "dev",
"extension_types": ["platform_app"]
},
// Allowlist KeyPermissions for login screen extensions that cannot set the
// user policy (they don't have a user yet).
"key_permissions_in_login_screen": {
"channel": "stable",
"dependencies": ["behavior:imprivata_login_screen_extension"],
"extension_types": ["login_screen_extension"],
"location": "policy",
"platforms": ["chromeos"]
},
// Imprivata extensions (login screen and in-session) use multiple different
// extension IDs for their individual channels (stable + beta) and as version
// pinning workaround (see crbug.com/1065112). To avoid having to repeat these
// long allowlists all over the place, we will use these three behavior
// features to depend upon instead (see crbug.com/1100979).
"imprivata_extension": [{
"channel": "stable",
"dependencies": ["behavior:imprivata_login_screen_extension"],
"extension_types": ["login_screen_extension"]
}, {
"channel": "stable",
"dependencies": ["behavior:imprivata_in_session_extension"],
"extension_types": ["extension"]
}],
"imprivata_login_screen_extension": {
"channel": "stable",
"extension_types": ["login_screen_extension"],
"location": "policy",
"platforms": ["chromeos"],
"allowlist": [
"E219EE36A3B40612FD2A8CD6937B03EF0C97D3FE",
"4DBFC1C52D6660DD90791976DF7FEF7B3D360509",
"CDA6A10BE50CE65C59B766D0CE6A27E8E0A1533F",
"D85454743B32D9F5ABF3E5F18DF78809F3A0ABD4",
"04569B963251EB28C0906099668D98EE65ECA2D8",
"7BF5B69C3ACA9E6ACA5C480661B8073EB9FA32A9",
"5F2EF8E9F7E975090278D6A0AD039860430C5684",
"97A4DC8AFC1FCF665C71B624A55675C297AB256C",
"A00EB72B456C374F1EA86C09833C7DBB6CD95CAE",
"51DDBADA37EF4D25AD03CB1BB6451799456FE183",
"DD97CAE4D8658003658140109BC119188A19A5B8",
"320857126E2180A5751AA384B7B7332A4964BD8C"
]
},
"imprivata_in_session_extension": {
"channel": "stable",
"extension_types": ["extension"],
"location": "policy",
"platforms": ["chromeos"],
"allowlist": [
"A24DE1B21A67E25FB62AC8491642038FE25DA75B",
"6B25164FFE2BADB5F1DBBD301CC022170267022D",
"4D15F9AFCF54E56F0A6E06D22DD15F133DCF0882",
"171F86E3D91235E5FC745282834BB3DA164F14B3",
"F7BDB4C21BFF955F851C6CF65167373BDEED6218",
"220ABCF657446B2CBEBDE2DDA09B6FC415E87FB7",
"B0092A67BFB22960DE49B11E9CA56035BD40BCFA",
"3899082721C4996840EA4DD3A7B604914FB915CF",
"0D0EF5C81661E90BAFD606EADD68D8BB5EDC7E9A",
"D53DFC9E0D738159557959ABCA61BDDC97470C87",
"579D5666AB7B27A2E9EA0B13FB7F70CA7D864F72",
"FC3BBFAD9D7E711BBBD8235E7640348A9B98EB5F"
]
}
}
|
