commit | c24baba4e0cf19aea5c69f2e7d97a522434296e7 | [log] [tgz] |
---|---|---|
author | Lutz Justen <ljusten@chromium.org> | Fri Dec 21 13:12:46 2018 |
committer | chrome-bot <chrome-bot@chromium.org> | Wed Jan 09 17:38:47 2019 |
tree | 419264e0808c38e44b5f97afb383bb8a994cfed0 | |
parent | 6c1a255660dd2528fa771f6ae3e7f12a174e3f84 [diff] |
authpolicy: Wire up cache lifetime policies Uses the value of DeviceGpoCacheLifetime and DeviceAuthDataCacheLifetime to set the lifetime of cache entries of the GPO version cache and the auth data cache. If set to 0, the caches are turned off. Also adds a small optimization to detect affiliation on the machine domain. BUG=chromium:908342,chromium:912312 TEST=Set DeviceGpoCacheLifetime and DeviceAuthDataCacheLifetime policies to 0 in GPO editor to turn the caches off. Verify caches are off: Reload policies. On device, enter echo '{"log_caches":true}'> /etc/authpolicyd_flags Reload policies a few times. Make sure the logs say GPO Cache: ... Downloading (not in cache) and not "Using cached version". Now log out and back in. Make sure the logs say Auth Data cache: No ... cached and not "Using cached ...". Repeat after setting both policies to 1 and repeat. This time, the opposite should happen (caches should be used). Note that logging out and back in clears the GPO cache. Change-Id: I191af32c1ddef4183bcb28cd71f0c9a24d10b994 Reviewed-on: https://chromium-review.googlesource.com/1388489 Commit-Ready: Lutz Justen <ljusten@chromium.org> Tested-by: Lutz Justen <ljusten@chromium.org> Reviewed-by: Roman Sorokin <rsorokin@chromium.org>
This repo holds (most) of the custom code that makes up the Chromium OS platform. That largely covers daemons, programs, and libraries that were written specifically for Chromium OS.
We moved from multiple separate repos in platform/ to a single repo in platform2/ for a number of reasons:
While most projects were merged, not all of them were. Some projects were standalone already (such as vboot), or never got around to being folded in (such as imageloader). Some day those extra projects might get merged in.
Similarly, some projects that were merged in, were then merged back out. This was due to the evolution of the Brillo project and collaboration with Android. That means the AOSP repos are the upstream and Chromium OS carries copies.
Project | Description |
---|---|
arc | Tools/deamons/init-scripts to run ARC |
attestation | Daemon and client for managing remote attestation |
authpolicy | Daemon for integrating with Microsoft Active Directory (AD) domains |
avtest_label_detect | Test tool for OCRing device labels |
biod | Biometrics daemon |
bluetooth | Bluetooth Service and tools |
bootstat | Tools for tracking points in the overall boot process (for metrics) |
buffet | Daemon for reacting to cloud messages |
camera | Chrome OS Camera daemon |
cecservice | Service for switching CEC enabled TVs on and off |
cfm-device-updater | Firmware updaters for CFM peripherals |
chaps | PKCS #11 implementation for TPM 1 devices |
chromeos-common-script | Shared scripts for partitions and basic disk information |
chromeos-config | CrOS unified build runtime config manager |
chromeos-dbus-bindings | Simplifies the implementation of D-Bus daemons and proxies |
common-mk | Common build & test logic for platform2 projects |
container_utils | Support tools for containers (e.g. device-jail) |
crash-reporter | The system crash handler & reporter |
cromo | modemmanager compatible D-Bus interface to support closed source modem drivers |
cros-disks | Daemon for mounting removable media (e.g. USB sticks and SD cards) |
cros_component | |
crosdns | Hostname resolution service for Chrome OS |
crosh | The Chromium OS shell |
cryptohome | Daemon and tools for managing encrypted /home and /var directories |
debugd | Centralized debug daemon for random tools |
diagnostics | Device telemetry and diagnostics daemons |
disk_updater | Utility for updating root disk firmware (e.g. SSDs and eMMC) |
dlcservice | Downloadable Content (DLC) Service daemon |
easy-unlock | Daemon for handling Easy Unlock requests (e.g. unlocking Chromebooks with an Android device) |
feedback | Daemon for headless systems that want to gather feedback (normally Chrome manages it) |
fitpicker | |
gobi-cromo-plugin | plugin for supporting gobi3k modems with cromo |
goldfishd | Android Emulator Daemon |
hammerd | Firmware updater utility for hammer hardware |
hermes | Chrome OS LPA implementation for eSIM hardware support |
image-burner | Daemon for writing disk images (e.g. recovery) to USB sticks & SD cards |
imageloader | Daemon for mounting signed disk images |
init | CrOS common startup init scripts and boot time helpers |
installer | CrOS installer utility (for AU/recovery/etc...) |
ippusb_manager | “Service” for ipp-over-usb printing |
libbrillo | Common platform utility library |
libchromeos-ui | |
libcontainer | |
libpasswordprovider | Password Provider library for securely managing credentials with system services |
libtpmcrypto | Library for AES256-GCM encryption with TPM sealed keys |
login_manager | Session manager for handling the life cycle of the main session (e.g. Chrome) |
lorgnette | Daemon for managing attached USB scanners via SANE |
media_perception | Media perception service for select platforms |
memd | Daemon that logs memory-related data and events |
metrics | Client side user metrics collection |
midis | MIDI service |
mist | Modem USB Interface Switching Tool |
ml | Machine learning service |
modem-utilities | |
modemfwd | Daemon for managing modem firmware updaters |
mtpd | Daemon for handling Media Transfer Protocol (MTP) with devices (e.g. phones) |
oobe_config | Utilities for saving and restoring OOBE config state |
p2p | Service for sharing files between CrOS devices (e.g. updates) |
peerd | Daemon for communicating with local peers |
permission_broker | |
policy_proto | Build file to compile policy proto file |
policy_utils | Tools and related library to set or override device policies |
portier | Multi-Network Neighbor Discovery Proxy service for Chrome OS |
power_manager | Userspace power management daemon and associated tools |
qmi2cpp | Chrome OS QMI IDL Compiler |
regions | |
run_oci | Minimalistic container runtime |
runtime_probe | Runtime probe tool for ChromeOS |
salsa | Touchpad experimentation framework |
screenshot | Tiny command to take a screenshot |
secure_erase_file | Helper tools for securely erasing files from storage (e.g. keys and PII data) |
security_tests | Compiled executables used by Tast security tests |
sepolicy | SELinux policy for Chrome OS |
shill | Chrome OS Connection Manager |
smbprovider | Daemon for connecting Samba / Windows networking shares to the Files.app |
smogcheck | Developer library for working with raw I2C devices |
st_flash | |
storage_info | Helper shell functions for retrieving disk information) |
system_api | Headers and .proto files etc. to be shared with chromium |
thd | Thermal daemon to help keep systems running cool |
timberslide | Tool for working with EC crashes for reporting purposes |
touch_firmware_calibration | |
touch_keyboard | Utilities for a touch based virtual keyboard |
tpm2-simulator | A software TPM 2.0 implementation (for testing/debugging) |
tpm_manager | Daemon and client for managing TPM setup and operations |
trim | Service to manage filesystem trim operations in the background |
trunks | Middleware and resource manager for interfacing with TPM 2.0 hardware |
u2fd | U2FHID emulation daemon for systems with secure elements (not TPMs) |
usb_bouncer | Tools for managing USBGuard white-lists and configuration on Chrome OS |
userfeedback | Various utilities to gather extended data for user feedback reports |
userspace_touchpad | |
virtual_file_provider | |
vm_tools | Utilities for Virtual Machine (VM) orchestration |
vpn-manager | |
webserver | Small web server with D-Bus client backends |
wifi-testbed | Tools for creating a WiFi testbed image |
wimax_manager |
These projects can be found here: https://chromium.googlesource.com/aosp/platform/