1115 lines
60 KiB
Text
1115 lines
60 KiB
Text
|
/ Policy template for Linux.
|
||
|
|
// Uncomment the policies you wish to activate and change their values to
|
||
|
|
// something useful for your case. The provided values are for reference only
|
||
|
|
// and do not provide meaningful defaults!
|
||
|
|
{
|
||
|
|
// Cross-origin HTTP Basic Auth prompts
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Controls whether third-party sub-content on a page is allowed to pop-up an
|
||
|
|
// HTTP Basic Auth dialog box. Typically this is disabled as a phishing
|
||
|
|
// defense. If this policy is not set, this is disabled and third-party sub-
|
||
|
|
// content will not be allowed to pop up a HTTP Basic Auth dialog box.
|
||
|
|
|
||
|
|
//"AllowCrossOriginAuthPrompt": false,
|
||
|
|
|
||
|
|
// Allow invocation of file selection dialogs.
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows access to local files on the machine by allowing Google Chrome to
|
||
|
|
// display file selection dialogs. If you enable this setting, users can open
|
||
|
|
// file selection dialogs as normal. If you disable this setting, whenever
|
||
|
|
// the user performs an action which would provoke a file selection dialog
|
||
|
|
// (like importing bookmarks, uploading files, saving links, etc.) a message
|
||
|
|
// is displayed instead and the user is assumed to have clicked Cancel on the
|
||
|
|
// file selection dialog. If this setting is not set, users can open file
|
||
|
|
// selection dialogs as normal.
|
||
|
|
|
||
|
|
//"AllowFileSelectionDialogs": true,
|
||
|
|
|
||
|
|
// Allow running plugins that are outdated
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows Google Chrome to run plugins that are outdated. If you enable this
|
||
|
|
// setting, outdated plugins are used as normal plugins. If you disable this
|
||
|
|
// setting, outdated plugins will not be used and users will not be asked for
|
||
|
|
// permission to run them. If this setting is not set, users will be asked
|
||
|
|
// for permission to run outdated plugins.
|
||
|
|
|
||
|
|
//"AllowOutdatedPlugins": true,
|
||
|
|
|
||
|
|
// Enable alternate error pages
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables the use of alternate error pages that are built into Google Chrome
|
||
|
|
// (such as 'page not found') and prevents users from changing this setting.
|
||
|
|
// If you enable this setting, alternate error pages are used. If you disable
|
||
|
|
// this setting, alternate error pages are never used. If you enable or
|
||
|
|
// disable this setting, users cannot change or override this setting in
|
||
|
|
// Google Chrome. If this policy is left not set, this will be enabled but
|
||
|
|
// the user will be able to change it.
|
||
|
|
|
||
|
|
//"AlternateErrorPagesEnabled": true,
|
||
|
|
|
||
|
|
// Always runs plugins that require authorization
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows Google Chrome to run plugins that require authorization. If you
|
||
|
|
// enable this setting, plugins that are not outdated always run. If this
|
||
|
|
// setting is disabled or not set, users will be asked for permission to run
|
||
|
|
// plugins that require authorization. These are plugins that can compromise
|
||
|
|
// security.
|
||
|
|
|
||
|
|
//"AlwaysAuthorizePlugins": true,
|
||
|
|
|
||
|
|
// Kerberos delegation server whitelist
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Servers that Google Chrome may delegate to. Separate multiple server names
|
||
|
|
// with commas. Wildcards (*) are allowed. If you leave this policy not set
|
||
|
|
// any server will be accepted for integrated authentication.
|
||
|
|
|
||
|
|
//"AuthNegotiateDelegateWhitelist": "foobar.example.com",
|
||
|
|
|
||
|
|
// Supported authentication schemes
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies which HTTP Authentication schemes are supported by Google Chrome.
|
||
|
|
// Possible values are 'basic', 'digest', 'ntlm' and 'negotiate'. Separate
|
||
|
|
// multiple values with commas. If this policy is left not set, all four
|
||
|
|
// schemes will be used.
|
||
|
|
|
||
|
|
//"AuthSchemes": "basic,digest,ntlm,negotiate",
|
||
|
|
|
||
|
|
// Authentication server whitelist
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies which servers should be whitelisted for integrated
|
||
|
|
// authentication. Integrated authentication is only enabled when Google
|
||
|
|
// Chrome receives an authentication challenge from a proxy or from a server
|
||
|
|
// which is in this permitted list. Separate multiple server names with
|
||
|
|
// commas. Wildcards (*) are allowed. If you leave this policy not set any
|
||
|
|
// server will be accepted for integrated authentication.
|
||
|
|
|
||
|
|
//"AuthServerWhitelist": "*example.com,foobar.com,*baz",
|
||
|
|
|
||
|
|
// Enable AutoFill
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables Google Chrome's AutoFill feature and allows users to auto complete
|
||
|
|
// web forms using previously stored information such as address or credit
|
||
|
|
// card information. If you disable this setting, AutoFill will be
|
||
|
|
// inaccessible to users. If you enable this setting or do not set a value,
|
||
|
|
// AutoFill will remain under the control of the user. This will allow them to
|
||
|
|
// configure AutoFill profiles and to switch AutoFill on or off at their own
|
||
|
|
// discretion.
|
||
|
|
|
||
|
|
//"AutoFillEnabled": false,
|
||
|
|
|
||
|
|
// Automatically select client certificates for these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to specify a list of url patterns that specify sites for which
|
||
|
|
// Google Chrome should automatically select a client certificates, if the
|
||
|
|
// site requests a certificate. If this policy is left not set no auto-
|
||
|
|
// selection will be done for any site.
|
||
|
|
|
||
|
|
//"AutoSelectCertificateForUrls": ["{\"pattern\":\"https://www.example.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\"}}}"],
|
||
|
|
|
||
|
|
// Continue running background apps when Google Chrome is closed
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Determines whether a Google Chrome process is started on OS login and keeps
|
||
|
|
// running when the last browser window is closed, allowing background apps to
|
||
|
|
// remain active. The background process displays an icon in the system tray
|
||
|
|
// and can always be closed from there. If this policy is set to True,
|
||
|
|
// background mode is enabled and cannot be controlled by the user in the
|
||
|
|
// browser settings. If this policy is set to False, background mode is
|
||
|
|
// disabled and cannot be controlled by the user in the browser settings. If
|
||
|
|
// this policy is left unset, background mode is initially disabled and can be
|
||
|
|
// controlled by the user in the browser settings.
|
||
|
|
|
||
|
|
//"BackgroundModeEnabled": true,
|
||
|
|
|
||
|
|
// Block third party cookies
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Blocks third party cookies. Enabling this setting prevents cookies from
|
||
|
|
// being set by web page elements that are not from the domain that is in the
|
||
|
|
// browser's address bar. Disabling this setting allows cookies to be set by
|
||
|
|
// web page elements that are not from the domain that is in the browser's
|
||
|
|
// address bar and prevents users from changing this setting. If this policy
|
||
|
|
// is left not set, third party cookies will be enabled but the user will be
|
||
|
|
// able to change that.
|
||
|
|
|
||
|
|
//"BlockThirdPartyCookies": false,
|
||
|
|
|
||
|
|
// Enable Bookmark Bar
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables the bookmark bar on Google Chrome. If you enable this setting,
|
||
|
|
// Google Chrome will show a bookmark bar. If you disable this setting, users
|
||
|
|
// will never see the bookmark bar. If you enable or disable this setting,
|
||
|
|
// users cannot change or override it in Google Chrome. If this setting is
|
||
|
|
// left not set the user can decide to use this function or not.
|
||
|
|
|
||
|
|
//"BookmarkBarEnabled": true,
|
||
|
|
|
||
|
|
// Clear site data on browser shutdown
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// This policy is an override for the "Clear cookies and other site data when
|
||
|
|
// I close my browser" content settings option. When set to enabled Google
|
||
|
|
// Chrome will delete all locally stored data from the browser when it is shut
|
||
|
|
// down. If set to disabled site data will not be cleared on exit. If this
|
||
|
|
// policy is left not set Google Chrome will use the default which is to
|
||
|
|
// preserve site data on shut down and the user will be able to change this.
|
||
|
|
// If the "RestoreOnStartup" policy is set to restore URLs from previous
|
||
|
|
// sessions this policy will not clear cookies or other data relevant to
|
||
|
|
// restoring the previous browsing session completely.
|
||
|
|
|
||
|
|
"ClearSiteDataOnExit": true,
|
||
|
|
|
||
|
|
// Enable Google Cloud Print proxy
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables Google Chrome to act as a proxy between Google Cloud Print and
|
||
|
|
// legacy printers connected to the machine. If this setting is enabled or
|
||
|
|
// not configured, users can enable the cloud print proxy by authentication
|
||
|
|
// with their Google account. If this setting is disabled, users cannot
|
||
|
|
// enable the proxy, and the machine will not be allowed to share it's
|
||
|
|
// printers with Google Cloud Print. If this policy is left not set, this
|
||
|
|
// will be enabled but the user will be able to change it.
|
||
|
|
|
||
|
|
//"CloudPrintProxyEnabled": true,
|
||
|
|
|
||
|
|
// Enable submission of documents to Google Cloud Print
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables Google Chrome to submit documents to Google Cloud Print for
|
||
|
|
// printing. NOTE: This only affects Google Cloud Print support in Google
|
||
|
|
// Chrome. It does not prevent users from submitting print jobs on web sites.
|
||
|
|
// If this setting is enabled or not configured, users can print to Google
|
||
|
|
// Cloud Print from the Google Chrome print dialog. If this setting is
|
||
|
|
// disabled, users cannot print to Google Cloud Print from the Google Chrome
|
||
|
|
// print dialog
|
||
|
|
|
||
|
|
//"CloudPrintSubmitEnabled": true,
|
||
|
|
|
||
|
|
// Allow cookies on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to set cookies. If this policy is left not set the global default
|
||
|
|
// value will be used for all sites either from the 'DefaultCookiesSetting'
|
||
|
|
// policy if it is set, or the user's personal configuration otherwise.
|
||
|
|
|
||
|
|
//"CookiesAllowedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Block cookies on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are not
|
||
|
|
// allowed to set cookies. If this policy is left not set the global default
|
||
|
|
// value will be used for all sites either from the 'DefaultCookiesSetting'
|
||
|
|
// policy if it is set, or the user's personal configuration otherwise.
|
||
|
|
|
||
|
|
//"CookiesBlockedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Allow session only cookies on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to set session only cookies. If this policy is left not set the
|
||
|
|
// global default value will be used for all sites either from the
|
||
|
|
// 'DefaultCookiesSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise. If the "RestoreOnStartup" policy is set to
|
||
|
|
// restore URLs from previous sessions this policy will not be respectred and
|
||
|
|
// cookies will be stored permanently for those sites.
|
||
|
|
|
||
|
|
//"CookiesSessionOnlyForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Set Chrome as Default Browser
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the default browser checks in Google Chrome and prevents users
|
||
|
|
// from changing them. If you enable this setting, Google Chrome will always
|
||
|
|
// check on startup whether it is the default browser and automatically
|
||
|
|
// register itself if possible. If this setting is disabled, Google Chrome
|
||
|
|
// will never check if it is the default browser and will disable user
|
||
|
|
// controls for setting this option. If this setting is not set, Google
|
||
|
|
// controls for setting this option. If this setting is not set, Google
|
||
|
|
// Chrome will allow the user to control whether it is the default browser and
|
||
|
|
// whether user notifications should be shown when it isn't.
|
||
|
|
|
||
|
|
//"DefaultBrowserSettingEnabled": true,
|
||
|
|
|
||
|
|
// Default cookies setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to set local data. Setting
|
||
|
|
// local data can be either allowed for all websites or denied for all
|
||
|
|
// websites. If this policy is left not set, 'AllowCookies' will be used and
|
||
|
|
// the user will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultCookiesSetting": 1,
|
||
|
|
|
||
|
|
// Default geolocation setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to track the users' physical
|
||
|
|
// location. Tracking the users' physical location can be allowed by default,
|
||
|
|
// denied by default or the user can be asked every time a website requests
|
||
|
|
// the physical location. If this policy is left not set, 'AskGeolocation'
|
||
|
|
// will be used and the user will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultGeolocationSetting": 0,
|
||
|
|
|
||
|
|
// Default images setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to display images.
|
||
|
|
// Displaying images can be either allowed for all websites or denied for all
|
||
|
|
// websites. If this policy is left not set, 'AllowImages' will be used and
|
||
|
|
// the user will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultImagesSetting": 1,
|
||
|
|
|
||
|
|
// Default JavaScript setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to run JavaScript. Running
|
||
|
|
// JavaScript can be either allowed for all websites or denied for all
|
||
|
|
// websites. If this policy is left not set, 'AllowJavaScript' will be used
|
||
|
|
// and the user will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultJavaScriptSetting": 1,
|
||
|
|
|
||
|
|
// Default notification setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to display desktop
|
||
|
|
// notifications. Displaying desktop notifications can be allowed by default,
|
||
|
|
// denied by default or the user can be asked every time a website wants to
|
||
|
|
// show desktop notifications. If this policy is left not set,
|
||
|
|
// 'AskNotifications' will be used and the user will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultNotificationsSetting": 2,
|
||
|
|
|
||
|
|
// Default plugins setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to automatically run
|
||
|
|
// plugins. Automatically running plugins can be either allowed for all
|
||
|
|
// websites or denied for all websites. If this policy is left not set,
|
||
|
|
// 'AllowPlugins' will be used and the user will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultPluginsSetting": 1,
|
||
|
|
|
||
|
|
// Default popups setting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set whether websites are allowed to show pop-ups. Showing
|
||
|
|
// popups can be either allowed for all websites or denied for all websites.
|
||
|
|
// If this policy is left not set, 'BlockPopups' will be used and the user
|
||
|
|
// will be able to change it.
|
||
|
|
|
||
|
|
//"DefaultPopupsSetting": 1,
|
||
|
|
|
||
|
|
// Enable the default search provider
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables the use of a default search provider. If you enable this setting,
|
||
|
|
// a default search is performed when the user types text in the omnibox that
|
||
|
|
// is not a URL. You can specify the default search provider to be used by
|
||
|
|
// setting the rest of the default search policies. If these are left empty,
|
||
|
|
// the user can choose the default provider. If you disable this setting, no
|
||
|
|
// search is performed when the user enters non-URL text in the omnibox. If
|
||
|
|
// you enable or disable this setting, users cannot change or override this
|
||
|
|
// setting in Google Chrome. If this policy is left not set, the default
|
||
|
|
// search provider is enabled, and the user will be able to set the search
|
||
|
|
// provider list.
|
||
|
|
|
||
|
|
"DefaultSearchProviderEnabled": true,
|
||
|
|
|
||
|
|
// Default search provider encodings
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the character encodings supported by the search provider.
|
||
|
|
// Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are
|
||
|
|
// tried in the order provided. This policy is optional. If not set, the
|
||
|
|
// default will be used which is UTF-8. This policy is only respected if the
|
||
|
|
// 'DefaultSearchProviderEnabled' policy is enabled.
|
||
|
|
|
||
|
|
//"DefaultSearchProviderEncodings": ["UTF-8", "UTF-16", "GB2312", "ISO-8859-1"],
|
||
|
|
|
||
|
|
// Default search provider icon
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the favorite icon URL of the default search provider. This
|
||
|
|
// policy is optional. If not set, no icon will be present for the search
|
||
|
|
// provider. This policy is only respected if the
|
||
|
|
// 'DefaultSearchProviderEnabled' policy is enabled.
|
||
|
|
|
||
|
|
//"DefaultSearchProviderIconURL": "http://search.my.company/favicon.ico",
|
||
|
|
|
||
|
|
// Default search provider instant URL
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the URL of the search engine used to provide instant results. The
|
||
|
|
// URL should contain the string '{searchTerms}', which will be replaced at
|
||
|
|
// query time by the text the user has entered so far. This policy is
|
||
|
|
// optional. If not set, no instant search results will be provided. This
|
||
|
|
// policy is only respected if the 'DefaultSearchProviderEnabled' policy is
|
||
|
|
// enabled.
|
||
|
|
|
||
|
|
//"DefaultSearchProviderInstantURL": "http://search.my.company/suggest?q={searchTerms}",
|
||
|
|
|
||
|
|
// Default search provider keyword
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the keyword, which is the shortcut used in the omnibox to trigger
|
||
|
|
// the search for this provider. This policy is optional. If not set, no
|
||
|
|
// keyword will activate the search provider. This policy is only considered
|
||
|
|
// if the 'DefaultSearchProviderEnabled' policy is enabled.
|
||
|
|
|
||
|
|
//"DefaultSearchProviderKeyword": "mis",
|
||
|
|
|
||
|
|
// Default search provider name
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the name of the default search provider. If left empty or not
|
||
|
|
// set, the host name specified by the search URL will be used. This policy
|
||
|
|
// is only considered if the 'DefaultSearchProviderEnabled' policy is enabled.
|
||
|
|
|
||
|
|
"DefaultSearchProviderName": "Google",
|
||
|
|
|
||
|
|
// Default search provider search URL
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the URL of the search engine used when doing a default search.
|
||
|
|
// The URL should contain the string '{searchTerms}', which will be replaced
|
||
|
|
// at query time by the terms the user is searching for. This option must be
|
||
|
|
// set when the 'DefaultSearchProviderEnabled' policy is enabled and will only
|
||
|
|
// be respected if this is the case.
|
||
|
|
|
||
|
|
"DefaultSearchProviderSearchURL": "http://www.google.com/cse?cx=partner-pub-6065445074637525:8941524350&q={searchTerms}",
|
||
|
|
|
||
|
|
// Default search provider suggest URL
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the URL of the search engine used to provide search suggestions.
|
||
|
|
// The URL should contain the string '{searchTerms}', which will be replaced
|
||
|
|
// at query time by the text the user has entered so far. This policy is
|
||
|
|
// optional. If not set, no suggest URL will be used. This policy is only
|
||
|
|
// respected if the 'DefaultSearchProviderEnabled' policy is enabled.
|
||
|
|
|
||
|
|
//"DefaultSearchProviderSuggestURL": "http://search.my.company/suggest?q={searchTerms}",
|
||
|
|
|
||
|
|
// Disable Developer Tools
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disables the Developer Tools and the JavaScript console. If you enable
|
||
|
|
// this setting, the Developer Tools can not be accessed and web-site elements
|
||
|
|
// can not be inspected anymore. Any keyboard shortcuts and any menu or
|
||
|
|
// context menu entries to open the Developer Tools or the JavaScript Console
|
||
|
|
// will be disabled. Setting this option to disabled or leaving it not set
|
||
|
|
// will allow the use to use the Developer Tools and the JavaScript console.
|
||
|
|
|
||
|
|
"DeveloperToolsDisabled": true,
|
||
|
|
|
||
|
|
// Disable support for 3D graphics APIs
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disable support for 3D graphics APIs. Enabling this setting prevents web
|
||
|
|
// pages from accessing the graphics processing unit (GPU). Specifically, web
|
||
|
|
// pages can not access the WebGL API and plugins can not use the Pepper 3D
|
||
|
|
// API. Disabling this setting or leaving it not set potentially allows web
|
||
|
|
// pages to use the WebGL API and plugins to use the Pepper 3D API. The
|
||
|
|
// default settings of the browser may still require command line arguments to
|
||
|
|
// be passed in order to use these APIs.
|
||
|
|
|
||
|
|
//"Disable3DAPIs": false,
|
||
|
|
|
||
|
|
// Disable CNAME lookup when negotiating Kerberos authentication
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies whether the generated Kerberos SPN is based on the canonical DNS
|
||
|
|
// name or the original name entered. If you enable this setting, CNAME
|
||
|
|
// lookup will be skipped and the server name will be used as entered. If you
|
||
|
|
// disable this setting or leave it not set, the canonical name of the server
|
||
|
|
// will be determined via CNAME lookup.
|
||
|
|
|
||
|
|
//"DisableAuthNegotiateCnameLookup": false,
|
||
|
|
|
||
|
|
// Specify whether the plugin finder should be disabled
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// If you set this setting to enabled the automatic search and installation of
|
||
|
|
// missing plugins will be disabled in Google Chrome. Setting this option to
|
||
|
|
// disabled or leave it not set the plugin finder will be active.
|
||
|
|
|
||
|
|
//"DisablePluginFinder": true,
|
||
|
|
|
||
|
|
// Disable Print Preview
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disable print preview. This setting is used to force the use of the system
|
||
|
|
// print dialog instead of print preview.
|
||
|
|
|
||
|
|
//"DisablePrintPreview": false,
|
||
|
|
|
||
|
|
// Disable SSL record splitting
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies whether SSL record splitting should be disabled. Record splitting
|
||
|
|
// is a workaround for a weakness in SSL 3.0 and TLS 1.0 but can cause
|
||
|
|
// compatibility issues with some HTTPS servers and proxies. If the policy is
|
||
|
|
// not set, or is set to false, then record splitting will be used on SSL/TLS
|
||
|
|
// connections which use CBC ciphersuites.
|
||
|
|
|
||
|
|
//"DisableSSLRecordSplitting": true,
|
||
|
|
|
||
|
|
// Disable SPDY protocol
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disables use of the SPDY protocol in Google Chrome. If this policy is
|
||
|
|
// enabled the SPDY protocol will not be available in Google Chrome. Setting
|
||
|
|
// this policy to disabled will allow the usage of SPDY. If this policy is
|
||
|
|
// left not set, SPDY will be available.
|
||
|
|
|
||
|
|
//"DisableSpdy": true,
|
||
|
|
|
||
|
|
// Specify a list of disabled plugins
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies a list of plugins that are disabled in Google Chrome and prevents
|
||
|
|
// users from changing this setting. The wildcard characters '*' and '?' can
|
||
|
|
// be used to match sequences of arbitrary characters. '*' matches an
|
||
|
|
// arbitrary number of characters while '?' specifies an optional single
|
||
|
|
// character, i.e. matches zero or one characters. The escape character is
|
||
|
|
// '\', so to match actual '*', '?', or '\' characters, you can put a '\' in
|
||
|
|
// front of them. If you enable this setting, the specified list of plugins
|
||
|
|
// is never used in Google Chrome. The plugins are marked as disabled in
|
||
|
|
// 'about:plugins' and users cannot enable them. Note that this policy can be
|
||
|
|
// overriden by EnabledPlugins and DisabledPluginsExceptions. If this policy
|
||
|
|
// is left not set the user can use any plugin installed on the system except
|
||
|
|
// for hard-coded incompatible, outdated or dangerous plugins.
|
||
|
|
|
||
|
|
//"DisabledPlugins": ["Java", "Shockwave Flash", "Chrome PDF Viewer"],
|
||
|
|
|
||
|
|
// Specify a list of plugins that the user can enable or disable
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies a list of plugins that user can enable or disable in Google
|
||
|
|
// Chrome. The wildcard characters '*' and '?' can be used to match sequences
|
||
|
|
// of arbitrary characters. '*' matches an arbitrary number of characters
|
||
|
|
// while '?' specifies an optional single character, i.e. matches zero or one
|
||
|
|
// characters. The escape character is '\', so to match actual '*', '?', or
|
||
|
|
// '\' characters, you can put a '\' in front of them. If you enable this
|
||
|
|
// setting, the specified list of plugins can be used in Google Chrome. Users
|
||
|
|
// can enable or disable them in 'about:plugins', even if the plugin also
|
||
|
|
// matches a pattern in DisabledPlugins. Users can also enable and disable
|
||
|
|
// plugins that don't match any patterns in DisabledPlugins,
|
||
|
|
// DisabledPluginsExceptions and EnabledPlugins. This policy is meant to
|
||
|
|
// allow for strict plugin balcklisting where the 'DisabledPlugins' list
|
||
|
|
// contains wildcarded entries like disable all plugins '*' or disable all
|
||
|
|
// Java plugins '*Java*' but the administrator wishes to enable some
|
||
|
|
// particular version like 'IcedTea Java 2.3'. This particular versions can be
|
||
|
|
// specified in this policy. If this policy is left not set any plugin that
|
||
|
|
// matches the patterns in the 'DisabledPlugins' will be locked disabled and
|
||
|
|
// the user won't be able to enable them.
|
||
|
|
|
||
|
|
//"DisabledPluginsExceptions": ["Java", "Shockwave Flash", "Chrome PDF Viewer"],
|
||
|
|
|
||
|
|
// Disable URL protocol schemes
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disables the listed protocol schemes in Google Chrome. URLs using a scheme
|
||
|
|
// from this list will not load and can not be navigated to. If this policy
|
||
|
|
// is left not set or the list is empty all schemes will be accessible in
|
||
|
|
// Google Chrome.
|
||
|
|
|
||
|
|
//"DisabledSchemes": ["file", "mailto"],
|
||
|
|
|
||
|
|
// Set disk cache directory
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the directory that Google Chrome will use for storing cached
|
||
|
|
// files on the disk. If you set this policy, Google Chrome will use the
|
||
|
|
// provided directory regardless whether the user has specified the '--disk-
|
||
|
|
// cache-dir' flag or not. If this policy is left not set the default cache
|
||
|
|
// directory will be used and the user will be able to override it with the
|
||
|
|
// '--disk-cache-dir' command line flag.
|
||
|
|
|
||
|
|
//"DiskCacheDir": "${user_home}/Chrome_cache",
|
||
|
|
|
||
|
|
// Set disk cache size in bytes
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the cache size that Google Chrome will use for storing cached
|
||
|
|
// files on the disk. If you set this policy, Google Chrome will use the
|
||
|
|
// provided cache size regardless whether the user has specified the '--disk-
|
||
|
|
// cache-size' flag or not. If the value of this policy is 0, the default
|
||
|
|
// cache size will be used but the user will not be able to change it. If
|
||
|
|
// this policy is not set the default size will be used and the user will be
|
||
|
|
// able to override it with the --disk-cache-size flag.
|
||
|
|
|
||
|
|
//"DiskCacheSize": 104857600,
|
||
|
|
|
||
|
|
// Enable network prediction.
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables network prediction in Google Chrome and prevents users from
|
||
|
|
// changing this setting. If you enable or disable this setting, users cannot
|
||
|
|
// change or override this setting in Google Chrome. If this policy is left
|
||
|
|
// not set, this will be enabled but the user will be able to change it.
|
||
|
|
|
||
|
|
//"DnsPrefetchingEnabled": true,
|
||
|
|
|
||
|
|
// Set download directory
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the directory that Google Chrome will use for downloading files.
|
||
|
|
// If you set this policy, Google Chrome will use the provided directory
|
||
|
|
// regardless whether the user has specified one or enabled the flag to be
|
||
|
|
// prompted for download location every time. If this policy is left not set
|
||
|
|
// the default download directory will be used and the user will be able to
|
||
|
|
// change it.
|
||
|
|
|
||
|
|
//"DownloadDirectory": "/home/${user_name}/Downloads",
|
||
|
|
|
||
|
|
// Enables or disables bookmark editing
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables or disables editing bookmarks in Google Chrome. If you enable this
|
||
|
|
// setting, bookmarks can be added, removed or modified. This is the default
|
||
|
|
// also when this policy is not set. If you disable this setting, bookmarks
|
||
|
|
// can not be added, removed or modified. Existing bookmarks are still
|
||
|
|
// available.
|
||
|
|
|
||
|
|
//"EditBookmarksEnabled": false,
|
||
|
|
|
||
|
|
// Include non-standard port in Kerberos SPN
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies whether the generated Kerberos SPN should include a non-standard
|
||
|
|
// port. If you enable this setting, and a non-standard port (i.e., a port
|
||
|
|
// other than 80 or 443) is entered, it will be included in the generated
|
||
|
|
// Kerberos SPN. If you disable this setting or leave it not set, the
|
||
|
|
// generated Kerberos SPN will not include a port in any case.
|
||
|
|
|
||
|
|
//"EnableAuthNegotiatePort": false,
|
||
|
|
|
||
|
|
// Whether online OCSP/CRL checks are performed
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// In light of the fact that soft-fail, online revocation checks provide no
|
||
|
|
// effective security benefit, they are disabled by default in Google Chrome
|
||
|
|
// version 19 and later. By setting this policy to true, the previous
|
||
|
|
// behaviour is restored and online OCSP/CRL checks will be performed. If the
|
||
|
|
// policy is not set, or is set to false, then Chrome will not perform online
|
||
|
|
// revocation checks in Chrome 19 and later.
|
||
|
|
|
||
|
|
//"EnableOnlineRevocationChecks": false,
|
||
|
|
|
||
|
|
// Specify a list of enabled plugins
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies a list of plugins that are enabled in Google Chrome and prevents
|
||
|
|
// users from changing this setting. The wildcard characters '*' and '?' can
|
||
|
|
// be used to match sequences of arbitrary characters. '*' matches an
|
||
|
|
// arbitrary number of characters while '?' specifies an optional single
|
||
|
|
// character, i.e. matches zero or one characters. The escape character is
|
||
|
|
// '\', so to match actual '*', '?', or '\' characters, you can put a '\' in
|
||
|
|
// front of them. The specified list of plugins is always used in Google
|
||
|
|
// Chrome if they are installed. The plugins are marked as enabled in
|
||
|
|
// 'about:plugins' and users cannot disable them. Note that this policy
|
||
|
|
// overrides both DisabledPlugins and DisabledPluginsExceptions. If this
|
||
|
|
// policy is left not set the user can disable any plugin installed on the
|
||
|
|
// system.
|
||
|
|
|
||
|
|
//"EnabledPlugins": ["Java", "Shockwave Flash", "Chrome PDF Viewer"],
|
||
|
|
|
||
|
|
// Enterprise web store name
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// The name of the enterprise web store, which will appear underneath the app
|
||
|
|
// icon on the new tab page. This setting has no effect if
|
||
|
|
// EnterpriseWebStoreURL is not set. If this setting is disabled, the
|
||
|
|
// enterprise web store app (if it exists) will be labeled with its URL.
|
||
|
|
|
||
|
|
//"EnterpriseWebStoreName": "WidgCo Chrome Apps",
|
||
|
|
|
||
|
|
// Enterprise web store URL
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the URL for the enterprise web store. When this setting is
|
||
|
|
// enabled, an app will appear on the new tab page which, when clicked, will
|
||
|
|
// take the user to the specified URL. Extensions and apps can be installed
|
||
|
|
// from this page without extra warnings being presented to the user. If this
|
||
|
|
// policy is set, the EnterpriseWebStoreName setting should also be set. If
|
||
|
|
// this setting is disabled, no enterprise web store app will appear on the
|
||
|
|
// new tab page.
|
||
|
|
|
||
|
|
//"EnterpriseWebStoreURL": "http://company-intranet/chromeapps",
|
||
|
|
|
||
|
|
// Configure extension installation blacklist
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to specify which extensions the users can NOT install.
|
||
|
|
// Extensions already installed will be removed if blacklisted. A blacklist
|
||
|
|
// value of '*' means all extensions are blacklisted unless they are
|
||
|
|
// explicitly listed in the whitelist. If this policy is left not set the
|
||
|
|
// user can install any extension in Google Chrome.
|
||
|
|
|
||
|
|
//"ExtensionInstallBlacklist": ["extension_id1", "extension_id2"],
|
||
|
|
|
||
|
|
// Configure the list of force-installed extensions
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to specify a list of extensions that will be installed silently,
|
||
|
|
// without user interaction. Each item of the list is a string that contains
|
||
|
|
// an extension ID and an update URL delimited by a semicolon (;). The
|
||
|
|
// extension ID is the 32-letter string found e.g. on chrome://extensions when
|
||
|
|
// in developer mode. The update URL should point to an Update Manifest XML
|
||
|
|
// document as described at
|
||
|
|
// http://code.google.com/chrome/extensions/autoupdate.html. For each item,
|
||
|
|
// Google Chrome will retrieve the extension specified by the extension ID
|
||
|
|
// from the update service at the specified update URL and silently install
|
||
|
|
// it. For example,
|
||
|
|
// lcncmkcnkcdbbanbjakcencbaoegdjlp;https://clients2.google.com/service/update2/crx
|
||
|
|
// installs the Google SSL Web Search extension from the standard Chrome Web
|
||
|
|
// Store update URL. For more information about hosting extensions, see:
|
||
|
|
// http://code.google.com/chrome/extensions/hosting.html. Users will be
|
||
|
|
// unable to uninstall extensions that are specified by this policy. If you
|
||
|
|
// remove an extension from this list, then it will be automatically
|
||
|
|
// uninstalled by Google Chrome. If this policy is left not set the user can
|
||
|
|
// uninstall any extension in Google Chrome.
|
||
|
|
|
||
|
|
//"ExtensionInstallForcelist": ["lcncmkcnkcdbbanbjakcencbaoegdjlp;https://clients2.google.com/service/update2/crx"],
|
||
|
|
|
||
|
|
// Configure extension installation whitelist
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to specify which extensions are not subject to the blacklist. A
|
||
|
|
// blacklist value of * means all extensions are blacklisted and users can
|
||
|
|
// only install extensions listed in the whitelist. By default, all
|
||
|
|
// extensions are whitelisted, but if all extensions have been blacklisted by
|
||
|
|
// policy, the whitelist can be used to override that policy.
|
||
|
|
|
||
|
|
//"ExtensionInstallWhitelist": ["extension_id1", "extension_id2"],
|
||
|
|
|
||
|
|
// GSSAPI library name
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies which GSSAPI library to use for HTTP Authentication. You can set
|
||
|
|
// either just a library name, or a full path. If no setting is provided,
|
||
|
|
// Google Chrome will fall back to using a default library name.
|
||
|
|
|
||
|
|
//"GSSAPILibraryName": "libgssapi_krb5.so.2",
|
||
|
|
|
||
|
|
// Prevent app promotions from appearing on the new tab page
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// When set to True, promotions for Chrome Web Store apps will not appear on
|
||
|
|
// the new tab page. Setting this option to False or leaving it not set will
|
||
|
|
// make the promotions for Chrome Web Store apps appear on the new tab page
|
||
|
|
|
||
|
|
//"HideWebStorePromo": false,
|
||
|
|
|
||
|
|
// Use New Tab Page as homepage
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the type of the default home page in Google Chrome and prevents
|
||
|
|
// users from changing home page preferences. The home page can either be set
|
||
|
|
// to a URL you specify or set to the New Tab Page. If you enable this
|
||
|
|
// setting, the New Tab Page is always used for the home page, and the home
|
||
|
|
// page URL location is ignored. If you disable this setting, the user's
|
||
|
|
// homepage will never be the New Tab Page, unless its URL is set to
|
||
|
|
// 'chrome://newtab'. If you enable or disable this setting, users cannot
|
||
|
|
// change their homepage type in Google Chrome. Leaving this policy not set
|
||
|
|
// will allow the user to choose whether the new tab page is his home page on
|
||
|
|
// his own.
|
||
|
|
|
||
|
|
"HomepageIsNewTabPage": false,
|
||
|
|
|
||
|
|
// Configure the home page URL
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the default home page URL in Google Chrome and prevents users
|
||
|
|
// from changing it. The home page type can either be set to a URL you
|
||
|
|
// specify here or set to the New Tab Page. If you select the New Tab Page,
|
||
|
|
// then this policy is ignored. If you enable this setting, users cannot
|
||
|
|
// change their home page URL in Google Chrome, but they can still can choose
|
||
|
|
// the New Tab Page as their home page. Leaving this policy not set will
|
||
|
|
// allow the user to choose his home page on his own if HomepageIsNewTabPage
|
||
|
|
// is not set too.
|
||
|
|
|
||
|
|
"HomepageLocation": "http://www.google.com/cse/home?cx=partner-pub-6065445074637525:8941524350",
|
||
|
|
|
||
|
|
// Allow images on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to display images. If this policy is left not set the global
|
||
|
|
// default value will be used for all sites either from the
|
||
|
|
// 'DefaultImagesSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise.
|
||
|
|
|
||
|
|
//"ImagesAllowedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Block images on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are not
|
||
|
|
// allowed to display images. If this policy is left not set the global
|
||
|
|
// default value will be used for all sites either from the
|
||
|
|
// 'DefaultImagesSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise.
|
||
|
|
|
||
|
|
//"ImagesBlockedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Import bookmarks from default browser on first run
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// This policy forces bookmarks to be imported from the current default
|
||
|
|
// browser if enabled. If enabled, this policy also affects the import dialog.
|
||
|
|
// If disabled, no bookmarks are imported. If it is not set, the user may be
|
||
|
|
// asked whether to import, or importing may happen automatically.
|
||
|
|
|
||
|
|
//"ImportBookmarks": true,
|
||
|
|
|
||
|
|
// Import browsing history from default browser on first run
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// This policy forces the browsing history to be imported from the current
|
||
|
|
// default browser if enabled. If enabled, this policy also affects the import
|
||
|
|
// dialog. If disabled, no browsing history is imported. If it is not set,
|
||
|
|
// the user may be asked whether to import, or importing may happen
|
||
|
|
// automatically.
|
||
|
|
|
||
|
|
//"ImportHistory": true,
|
||
|
|
|
||
|
|
// Import of homepage from default browser on first run
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// This policy forces the home page to be imported from the current default
|
||
|
|
// browser if enabled. If disabled, the home page is not imported. If it is
|
||
|
|
// not set, the user may be asked whether to import, or importing may happen
|
||
|
|
// automatically.
|
||
|
|
|
||
|
|
//"ImportHomepage": true,
|
||
|
|
|
||
|
|
// Import saved passwords from default browser on first run
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// This policy forces the saved passwords to be imported from the previous
|
||
|
|
// default browser if enabled. If enabled, this policy also affects the import
|
||
|
|
// dialog. If disabled, the saved passwords are not imported. If it is not
|
||
|
|
// set, the user may be asked whether to import, or importing may happen
|
||
|
|
// automatically.
|
||
|
|
|
||
|
|
//"ImportSavedPasswords": true,
|
||
|
|
|
||
|
|
// Import search engines from default browser on first run
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// This policy forces search engines to be imported from the current default
|
||
|
|
// browser if enabled. If enabled, this policy also affects the import dialog.
|
||
|
|
// If disabled, the default search engine is not imported. If it is not set,
|
||
|
|
// the user may be asked whether to import, or importing may happen
|
||
|
|
// automatically.
|
||
|
|
|
||
|
|
"ImportSearchEngine": false,
|
||
|
|
|
||
|
|
// Incognito mode availability.
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies whether the user may open pages in Incognito mode in Google
|
||
|
|
// Chrome. If 'Enabled' is selected or the policy is left unset, pages may be
|
||
|
|
// opened in Incognito mode. If 'Disabled' is selected, pages may not be
|
||
|
|
// opened in Incognito mode. If 'Forced' is selected, pages may be opened
|
||
|
|
// ONLY in Incognito mode.
|
||
|
|
|
||
|
|
//"IncognitoModeAvailability": 1,
|
||
|
|
|
||
|
|
// Enable Instant
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables Google Chrome's Instant feature and prevents users from changing
|
||
|
|
// this setting. If you enable this setting, Google Chrome Instant is
|
||
|
|
// enabled. If you disable this setting, Google Chrome Instant is disabled.
|
||
|
|
// If you enable or disable this setting, users cannot change or override this
|
||
|
|
// setting. If this setting is left not set the user can decide to use this
|
||
|
|
// function or not.
|
||
|
|
|
||
|
|
//"InstantEnabled": true,
|
||
|
|
|
||
|
|
// Allow JavaScript on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to run JavaScript. If this policy is left not set the global
|
||
|
|
// default value will be used for all sites either from the
|
||
|
|
// 'DefaultJavaScriptSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise.
|
||
|
|
|
||
|
|
//"JavaScriptAllowedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Block JavaScript on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are not
|
||
|
|
// allowed to run JavaScript. If this policy is left not set the global
|
||
|
|
// default value will be used for all sites either from the
|
||
|
|
// 'DefaultJavaScriptSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise.
|
||
|
|
|
||
|
|
//"JavaScriptBlockedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Maximal number of concurrent connections to the proxy server
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Specifies the maximal number of simultanious connections to the proxy
|
||
|
|
// server. Some proxy servers can not handle high number of concurrent
|
||
|
|
// connections per client and this can be solved by setting this policy to a
|
||
|
|
// lower value. The value of this policy should be lower than 100 and higher
|
||
|
|
// than 6 and the default value is 32. Some web apps are known to consume
|
||
|
|
// many connections with hanging GETs, so lowering below 32 may lead to
|
||
|
|
// browser networking hangs if too many such web apps are open. Lower below
|
||
|
|
// the default at your own risk. If this policy is left not set the default
|
||
|
|
// value will be used which is 32.
|
||
|
|
|
||
|
|
//"MaxConnectionsPerProxy": 32,
|
||
|
|
|
||
|
|
// Set media disk cache size in bytes
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Configures the chache size that Google Chrome will use for storing cached
|
||
|
|
// media files on the disk. If you set this policy, Google Chrome will use
|
||
|
|
// the provided cache size regardless whether the user has specified the
|
||
|
|
// '--media-cache-size' flag or not. If the value of this policy is 0, the
|
||
|
|
// default cache size will be used but the user will not be able to change it.
|
||
|
|
// If this policy is not set the default size will be used and the user will
|
||
|
|
// be able to override it with the --media-cache-size flag.
|
||
|
|
|
||
|
|
//"MediaCacheSize": 104857600,
|
||
|
|
|
||
|
|
// Enable reporting of usage and crash-related data
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables anonymous reporting of usage and crash-related data about Google
|
||
|
|
// Chrome to Google and prevents users from changing this setting. If you
|
||
|
|
// enable this setting, anonymous reporting of usage and crash-related data is
|
||
|
|
// sent to Google. If you disable this setting, anonymous reporting of usage
|
||
|
|
// and crash-related data is never sent to Google. If you enable or disable
|
||
|
|
// this setting, users cannot change or override this setting in Google
|
||
|
|
// Chrome. If this policy is left not set the setting will be what the user
|
||
|
|
// chose upon installation / first run.
|
||
|
|
|
||
|
|
//"MetricsReportingEnabled": true,
|
||
|
|
|
||
|
|
// Allow notifications on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to display notifications. If this policy is left not set the
|
||
|
|
// global default value will be used for all sites either from the
|
||
|
|
// 'DefaultNotificationsSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise.
|
||
|
|
|
||
|
|
//"NotificationsAllowedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Block notifications on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are not
|
||
|
|
// allowed to display notifications. If this policy is left not set the
|
||
|
|
// global default value will be used for all sites either from the
|
||
|
|
// 'DefaultNotificationsSetting' policy if it is set, or the user's personal
|
||
|
|
// configuration otherwise.
|
||
|
|
|
||
|
|
//"NotificationsBlockedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Allow users to show passwords in Password Manager
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Controls whether the user may show passwords in clear text in the password
|
||
|
|
// manager. If you disable this setting, the password manager does not allow
|
||
|
|
// showing stored passwords in clear text in the password manager window. If
|
||
|
|
// you enable or do not set this policy, users can view their passwords in
|
||
|
|
// clear text in the password manager.
|
||
|
|
|
||
|
|
"PasswordManagerAllowShowPasswords": false,
|
||
|
|
|
||
|
|
// Enable the password manager
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables saving passwords and using saved passwords in Google Chrome. If
|
||
|
|
// you enable this setting, users can have Google Chrome memorize passwords
|
||
|
|
// and provide them automatically the next time they log in to a site. If you
|
||
|
|
// disable this setting, users are not able to save passwords or use already
|
||
|
|
// saved passwords. If you enable or disable this setting, users cannot
|
||
|
|
// change or override this setting in Google Chrome. If this policy is left
|
||
|
|
// not set, this will be enabled but the user will be able to change it.
|
||
|
|
|
||
|
|
"PasswordManagerEnabled": false,
|
||
|
|
|
||
|
|
// Allow plugins on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to run plugins. If this policy is left not set the global default
|
||
|
|
// value will be used for all sites either from the 'DefaultPluginsSetting'
|
||
|
|
// policy if it is set, or the user's personal configuration otherwise.
|
||
|
|
|
||
|
|
//"PluginsAllowedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Block plugins on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are not
|
||
|
|
// allowed to run plugins. If this policy is left not set the global default
|
||
|
|
// value will be used for all sites either from the 'DefaultPluginsSetting'
|
||
|
|
// policy if it is set, or the user's personal configuration otherwise.
|
||
|
|
|
||
|
|
//"PluginsBlockedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Allow popups on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are
|
||
|
|
// allowed to open popups. If this policy is left not set the global default
|
||
|
|
// value will be used for all sites either from the 'DefaultPopupsSetting'
|
||
|
|
// policy if it is set, or the user's personal configuration otherwise.
|
||
|
|
|
||
|
|
//"PopupsAllowedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Block popups on these sites
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to set a list of url patterns that specify sites which are not
|
||
|
|
// allowed to open popups. If this policy is left not set the global default
|
||
|
|
// value will be used for all sites either from the 'DefaultPopupsSetting'
|
||
|
|
// policy if it is set, or the user's personal configuration otherwise.
|
||
|
|
|
||
|
|
//"PopupsBlockedForUrls": ["http://www.example.com", "[*.]example.edu"],
|
||
|
|
|
||
|
|
// Enable printing
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables printing in Google Chrome and prevents users from changing this
|
||
|
|
// setting. If this setting is enabled or not configured, users can print.
|
||
|
|
// If this setting is disabled, users cannot print from Google Chrome.
|
||
|
|
// Printing is disabled in the wrench menu, extensions, JavaScript
|
||
|
|
// applications, etc. It is still possible to print from plugins that bypass
|
||
|
|
// Google Chrome while printing. For example certain Flash applications has
|
||
|
|
// the print option in their context menu, and that will not be disabled. If
|
||
|
|
// this policy is left not set, this will be enabled but the user will be able
|
||
|
|
// to change it.
|
||
|
|
|
||
|
|
//"PrintingEnabled": true,
|
||
|
|
|
||
|
|
// Proxy bypass rules
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Google Chrome will bypass any proxy for the list of hosts given here. This
|
||
|
|
// policy only takes effect if you have selected manual proxy settings at
|
||
|
|
// 'Choose how to specify proxy server settings'. You should leave this
|
||
|
|
// policy not set if you have selected any other mode for setting proxy
|
||
|
|
// policies. For more detailed examples, visit:
|
||
|
|
// http://www.chromium.org/developers/design-documents/network-settings#TOC-
|
||
|
|
// Command-line-options-for-proxy-sett
|
||
|
|
|
||
|
|
//"ProxyBypassList": "http://www.example1.com,http://www.example2.com,http://internalsite/",
|
||
|
|
|
||
|
|
// Choose how to specify proxy server settings
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to specify the proxy server used by Google Chrome and prevents
|
||
|
|
// users from changing proxy settings. If you choose to never use a proxy
|
||
|
|
// server and always connect directly, all other options are ignored. If you
|
||
|
|
// choose to use system proxy settings or auto detect the proxy server, all
|
||
|
|
// other options are ignored. If you choose fixed server proxy mode, you can
|
||
|
|
// specify further options in 'Address or URL of proxy server' and 'Comma-
|
||
|
|
// separated list of proxy bypass rules'. If you choose to use a .pac proxy
|
||
|
|
// script, you must specify the URL to the script in 'URL to a proxy .pac
|
||
|
|
// file'. For detailed examples, visit: http://www.chromium.org/developers
|
||
|
|
// /design-documents/network-settings#TOC-Command-line-options-for-proxy-sett
|
||
|
|
// If you enable this setting, Google Chrome ignores all proxy-related options
|
||
|
|
// specified from the command line. Leaving this policy not set will allow
|
||
|
|
// the users to choose the proxy settings on their own.
|
||
|
|
|
||
|
|
//"ProxyMode": "direct",
|
||
|
|
|
||
|
|
// URL to a proxy .pac file
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// You can specify a URL to a proxy .pac file here. This policy only takes
|
||
|
|
// effect if you have selected manual proxy settings at 'Choose how to specify
|
||
|
|
// proxy server settings'. You should leave this policy not set if you have
|
||
|
|
// selected any other mode for setting proxy policies. For detailed examples,
|
||
|
|
// visit: http://www.chromium.org/developers/design-documents/network-settings
|
||
|
|
// #TOC-Command-line-options-for-proxy-sett
|
||
|
|
|
||
|
|
//"ProxyPacUrl": "http://internal.site/example.pac",
|
||
|
|
|
||
|
|
// Address or URL of proxy server
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// You can specify the URL of the proxy server here. This policy only takes
|
||
|
|
// effect if you have selected manual proxy settings at 'Choose how to specify
|
||
|
|
// proxy server settings'. You should leave this policy not set if you have
|
||
|
|
// selected any other mode for setting proxy policies. For more options and
|
||
|
|
// detailed examples, visit: http://www.chromium.org/developers/design-
|
||
|
|
// documents/network-settings#TOC-Command-line-options-for-proxy-sett
|
||
|
|
|
||
|
|
//"ProxyServer": "123.123.123.123:8080",
|
||
|
|
|
||
|
|
// Enable firewall traversal from remote access host
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables usage of STUN and relay servers when remote clients are trying to
|
||
|
|
// establish a connection to this machine. If this setting is enabled, then
|
||
|
|
// remote clients can discover and connect to this machines even if they are
|
||
|
|
// separated by a firewall. If this setting is disabled and outgoing UDP
|
||
|
|
// connections are filtered by the firewall, then this machine will only allow
|
||
|
|
// connections from client machines within the local network. If this policy
|
||
|
|
// is left not set the setting will be enabled.
|
||
|
|
|
||
|
|
//"RemoteAccessHostFirewallTraversal": false,
|
||
|
|
|
||
|
|
// Action on startup
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows you to specify the behavior on startup. If you choose 'Open home
|
||
|
|
// page' the home page will always be opened when you start Google Chrome. If
|
||
|
|
// you choose 'Restore the last session', the URLs that were open last time
|
||
|
|
// Google Chrome was closed will be reopened and the browsing session will be
|
||
|
|
// restored as it was left. Choosing this option disables some settings that
|
||
|
|
// rely on sessions or that perform actions on exit (such as Clear browsing
|
||
|
|
// data on exit or session-only cookies). If you choose 'Open a list of
|
||
|
|
// URLs', the list of 'URLs to open on startup' will be opened when a user
|
||
|
|
// starts Google Chrome. If you enable this setting, users cannot change or
|
||
|
|
// override it in Google Chrome. Disabling this setting is equvalent to
|
||
|
|
// leaving it not configured. The user will still be able to change it in
|
||
|
|
// Google Chrome.
|
||
|
|
"RestoreOnStartup": 4,
|
||
|
|
|
||
|
|
// URLs to open on startup
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// If 'Open a list of URLs' is selected as the startup action, this allows you
|
||
|
|
// to specify the list of URLs that are opened. If left not set no URL will be
|
||
|
|
// opened on start up. This policy only works if the 'RestoreOnStartup'
|
||
|
|
// policy is set to 'RestoreOnStartupIsURLs'.
|
||
|
|
|
||
|
|
"RestoreOnStartupURLs": ["http://www.google.com/cse?cx=partner-pub-6065445074637525:8941524350"],
|
||
|
|
|
||
|
|
// Enable Safe Browsing
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables Google Chrome's Safe Browsing feature and prevents users from
|
||
|
|
// changing this setting. If you enable this setting, Safe Browsing is always
|
||
|
|
// active. If you disable this setting, Safe Browsing is never active. If
|
||
|
|
// you enable or disable this setting, users cannot change or override this
|
||
|
|
// setting in Google Chrome. If this policy is left not set, this will be
|
||
|
|
// enabled but the user will be able to change it.
|
||
|
|
|
||
|
|
//"SafeBrowsingEnabled": true,
|
||
|
|
|
||
|
|
// Disable saving browser history
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disables saving browser history in Google Chrome and prevents users from
|
||
|
|
// changing this setting. If this setting is enabled, browsing history is not
|
||
|
|
// saved. If this setting is disabled or not set, browsing history is saved.
|
||
|
|
|
||
|
|
//"SavingBrowserHistoryDisabled": true,
|
||
|
|
|
||
|
|
// Enable search suggestions
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables search suggestions in Google Chrome's Omnibox and prevents users
|
||
|
|
// from changing this setting. If you enable this setting, search suggestions
|
||
|
|
// are used. If you disable this setting, search suggestions are never used.
|
||
|
|
// If you enable or disable this setting, users cannot change or override this
|
||
|
|
// setting in Google Chrome. If this policy is left not set, this will be
|
||
|
|
// enabled but the user will be able to change it.
|
||
|
|
|
||
|
|
//"SearchSuggestEnabled": true,
|
||
|
|
|
||
|
|
// Show Home button on toolbar
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Shows the Home button on Google Chrome's toolbar. If you enable this
|
||
|
|
// setting, the Home button is always shown. If you disable this setting, the
|
||
|
|
// Home button is never shown. If you enable or disable this setting, users
|
||
|
|
// cannot change or override this setting in Google Chrome. Leaving this
|
||
|
|
// policy not set will allow the user to choose whether to show the home
|
||
|
|
// button.
|
||
|
|
|
||
|
|
"ShowHomeButton": true,
|
||
|
|
|
||
|
|
// Disable synchronization of data with Google
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Disables data synchronization in Google Chrome using Google-hosted
|
||
|
|
// synchronization services and prevents users from changing this setting. If
|
||
|
|
// you enable this setting, users cannot change or override this setting in
|
||
|
|
// Google Chrome. If this policy is left not set Google Sync will be
|
||
|
|
// available for the user to choose whether to use it or not.
|
||
|
|
|
||
|
|
"SyncDisabled": true,
|
||
|
|
|
||
|
|
// Enable Translate
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Enables the integrated Google Translate service on Google Chrome. If you
|
||
|
|
// enable this setting, Google Chrome will show an integrated toolbar offering
|
||
|
|
// to translate the page for the user, when appropriate. If you disable this
|
||
|
|
// setting, users will never see the translation bar. If you enable or
|
||
|
|
// disable this setting, users cannot change or override this setting in
|
||
|
|
// Google Chrome. If this setting is left not set the user can decide to use
|
||
|
|
// this function or not.
|
||
|
|
|
||
|
|
"TranslateEnabled": false,
|
||
|
|
|
||
|
|
// Block access to a list of URLs
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Blocks access to the listed URLs. This policy prevents the user from
|
||
|
|
// loading web pages from blacklisted URLs. A URL has the format
|
||
|
|
// 'scheme://host:port/path'. The optional scheme can be http, https or ftp.
|
||
|
|
// Only this scheme will be blocked; if none is specified, all schemes are
|
||
|
|
// blocked. The host can be a hostname or an IP address. Subdomains of a
|
||
|
|
// hostname will also be blocked. To prevent blocking subdomains, include a
|
||
|
|
// '.' before the hostname. The special hostname '*' will block all domains.
|
||
|
|
// The optional port is a valid port number from 1 to 65535. If none is
|
||
|
|
// specified, all ports are blocked. If the optional path is specified, only
|
||
|
|
// paths with that prefix will be blocked. Exceptions can be defined in the
|
||
|
|
// URL whitelist policy. These policies are limited to 100 entries; subsequent
|
||
|
|
// entries will be ignored. If this policy is not set no URL will be
|
||
|
|
// blacklisted in the browser.
|
||
|
|
|
||
|
|
//"URLBlacklist": ["example.com", "https://ssl.server.com", "hosting.com/bad_path", "http://server:8080/path", ".exact.hostname.com", "*"],
|
||
|
|
|
||
|
|
// Allows access to a list of URLs
|
||
|
|
//-------------------------------------------------------------------------
|
||
|
|
// Allows access to the listed URLs, as exceptions to the URL blacklist. See
|
||
|
|
// the description of the URL blacklist policy for the format of entries of
|
||
|
|
// this list. This policy can be used to open exceptions to restrictive
|
||
|
|
// blacklists. For example, '*' can be blacklisted to block all requests, and
|
||
|
|
// this policy can be used to allow access to a limited list of URLs. It can
|
||
|
|
// be used to open exceptions to certain schemes, subdomains of other domains,
|
||
|
|
// ports, or specific paths. The most specific filter will determine if a URL
|
||
|
|
// is blocked or allowed. The whitelist takes precedence over the blacklist.
|
||
|
|
// This policy is limited to 100 entries; subsequent entries will be ignored.
|
||
|
|
// If this policy is not set there will be no exceptions to the blacklist from
|
||
|
|
// the 'URLBlacklist' policy.
|
||
|
|
|
||
|
|
//"URLWhitelist": ["example.com", "https://ssl.server.com", "hosting.com/bad_path", "http://server:8080/path", ".exact.hostname.com"]
|
||
|
|
|
||
|
|
}
|