FS#44884 - chromium does not enforce policy settings

Attached to Project: Arch Linux
Opened by Bill Mair (red-lichtie) - Thursday, 07 May 2015, 07:55 GMT
Last edited by Evangelos Foutras (foutrelis) - Thursday, 07 May 2015, 11:53 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Evangelos Foutras (foutrelis)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Package: chromium
Version: 42.0.2311.135-1
Architecture: x86_64 and armv7

After trying to get pepper flash working on ARM, I found that "/etc/chromium/default" wasn't being referenced (using strace).

So I thought that setting up the configuration must have changed and found the profile description.

Following the instructions here: https://www.chromium.org/administrators/linux-quick-start, I created the directories and file "/etc/chromium/policies/managed/test_policy.json".

The directories are scanned and the file is read on start up but the home page isn't opened.

When I open "chrome://policy/", I can confirm that the value has been set (displayed in a table):

Applies to: Machine
Level: Mandatory
Policy name: HomepageLocation
Policy Value: www.chromium.org
Status: OK

Pressing the "Home" button takes me to the usual google page and ignores the HomepageLocation setting.

If other settings are effected then this is a security issue because policies that are defined by the administrator as bing security relevent are ignored.
This task depends upon

Closed by  Evangelos Foutras (foutrelis)
Thursday, 07 May 2015, 11:53 GMT
Reason for closing:  Not a bug
Additional comments about closing:  Policy files get loaded correctly.
Comment by Bill Mair (red-lichtie) - Thursday, 07 May 2015, 08:06 GMT Comment by Evangelos Foutras (foutrelis) - Thursday, 07 May 2015, 11:39 GMT
The example policy file gets loaded fine but you'd also have to set HomepageIsNewTabPage to false if you wanted it to have any effect. (By default, Chromium will use the "new tab page" as the homepage, as seen in the attached screen shot.)

Regarding Pepper Flash, it should work out of the box (assuming you have installed chromium-pepper-flash from the AUR).

Loading...