1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_CHROMEOS_POLICY_DEVICE_CLOUD_POLICY_MANAGER_CHROMEOS_H_
#define CHROME_BROWSER_CHROMEOS_POLICY_DEVICE_CLOUD_POLICY_MANAGER_CHROMEOS_H_
#include <bitset>
#include <string>
#include <vector>
#include "base/basictypes.h"
#include "base/callback.h"
#include "base/compiler_specific.h"
#include "base/memory/ref_counted.h"
#include "base/memory/scoped_ptr.h"
#include "chrome/browser/chromeos/policy/enrollment_status_chromeos.h"
#include "chrome/browser/chromeos/policy/server_backed_state_keys_broker.h"
#include "components/policy/core/common/cloud/cloud_policy_client.h"
#include "components/policy/core/common/cloud/cloud_policy_manager.h"
#include "components/policy/core/common/cloud/cloud_policy_store.h"
namespace base {
class SequencedTaskRunner;
}
namespace chromeos {
namespace attestation {
class AttestationPolicyObserver;
}
}
class PrefRegistrySimple;
class PrefService;
namespace policy {
class DeviceCloudPolicyStoreChromeOS;
class DeviceManagementService;
class EnrollmentHandlerChromeOS;
class EnterpriseInstallAttributes;
// CloudPolicyManager specialization for device policy on Chrome OS. The most
// significant addition is support for device enrollment.
class DeviceCloudPolicyManagerChromeOS : public CloudPolicyManager {
public:
typedef std::bitset<32> AllowedDeviceModes;
typedef base::Callback<void(EnrollmentStatus)> EnrollmentCallback;
// |task_runner| is the runner for policy refresh tasks.
// |background_task_runner| is used to execute long-running background tasks
// that may involve file I/O.
DeviceCloudPolicyManagerChromeOS(
scoped_ptr<DeviceCloudPolicyStoreChromeOS> store,
const scoped_refptr<base::SequencedTaskRunner>& task_runner,
const scoped_refptr<base::SequencedTaskRunner>& background_task_runner,
EnterpriseInstallAttributes* install_attributes,
ServerBackedStateKeysBroker* state_keys_broker);
virtual ~DeviceCloudPolicyManagerChromeOS();
// Establishes the connection to the cloud, updating policy as necessary.
void Connect(
PrefService* local_state,
DeviceManagementService* device_management_service,
scoped_ptr<CloudPolicyClient::StatusProvider> device_status_provider);
// Starts enrollment or re-enrollment. Once the enrollment process completes,
// |callback| is invoked and gets passed the status of the operation.
// |allowed_modes| specifies acceptable DEVICE_MODE_* constants for
// enrollment.
void StartEnrollment(const std::string& auth_token,
bool is_auto_enrollment,
const AllowedDeviceModes& allowed_modes,
const EnrollmentCallback& callback);
// Cancels a pending enrollment operation, if any.
void CancelEnrollment();
// Gets/Sets the device requisition.
std::string GetDeviceRequisition() const;
void SetDeviceRequisition(const std::string& requisition);
// Checks whether enterprise enrollment should be a regular step during OOBE.
bool ShouldAutoStartEnrollment() const;
// Checks whether the user can cancel enrollment.
bool CanExitEnrollment() const;
// Gets the domain this device is supposed to be enrolled to.
std::string GetForcedEnrollmentDomain() const;
// CloudPolicyManager:
virtual void Shutdown() OVERRIDE;
// CloudPolicyStore::Observer:
virtual void OnStoreLoaded(CloudPolicyStore* store) OVERRIDE;
// Pref registration helper.
static void RegisterPrefs(PrefRegistrySimple* registry);
// Returns the device serial number, or an empty string if not available.
static std::string GetMachineID();
// Returns the machine model, or an empty string if not available.
static std::string GetMachineModel();
// Returns the robot 'email address' associated with the device robot
// account (sometimes called a service account) associated with this device
// during enterprise enrollment.
std::string GetRobotAccountId();
private:
// Creates a new CloudPolicyClient.
scoped_ptr<CloudPolicyClient> CreateClient();
// Starts policy refreshes if |store_| indicates a managed device and the
// necessary dependencies have been provided via Initialize().
void StartIfManaged();
// Handles completion signaled by |enrollment_handler_|.
void EnrollmentCompleted(const EnrollmentCallback& callback,
EnrollmentStatus status);
// Starts the connection via |client_to_connect|.
void StartConnection(scoped_ptr<CloudPolicyClient> client_to_connect);
// Saves the state keys received from |session_manager_client_|.
void OnStateKeysUpdated();
// Initializes requisition settings at OOBE with values from VPD.
void InitializeRequisition();
// Gets the device restore mode as stored in |local_state_|.
std::string GetRestoreMode() const;
// Points to the same object as the base CloudPolicyManager::store(), but with
// actual device policy specific type.
scoped_ptr<DeviceCloudPolicyStoreChromeOS> device_store_;
scoped_refptr<base::SequencedTaskRunner> background_task_runner_;
EnterpriseInstallAttributes* install_attributes_;
ServerBackedStateKeysBroker* state_keys_broker_;
ServerBackedStateKeysBroker::Subscription state_keys_update_subscription_;
DeviceManagementService* device_management_service_;
scoped_ptr<CloudPolicyClient::StatusProvider> device_status_provider_;
// PrefService instance to read the policy refresh rate from.
PrefService* local_state_;
// Non-null if there is an enrollment operation pending.
scoped_ptr<EnrollmentHandlerChromeOS> enrollment_handler_;
scoped_ptr<chromeos::attestation::AttestationPolicyObserver>
attestation_policy_observer_;
DISALLOW_COPY_AND_ASSIGN(DeviceCloudPolicyManagerChromeOS);
};
} // namespace policy
#endif // CHROME_BROWSER_CHROMEOS_POLICY_DEVICE_CLOUD_POLICY_MANAGER_CHROMEOS_H_
|
