Commit 2a5046b3 authored by Maksim Ivanov's avatar Maksim Ivanov Committed by Commit Bot

enterprise.platformKeys: Don't check EnabledForUser policy level

Temporarily remove the check of the AttestationEnabledForUser's
pref/policy level from the chrome.enteprise.platformKeys
implementation, since this check was not present before (until
r701979), and since this isn't compatible with the current corp
policies.

This is a temporary workaround that will need to be reverted in
the future, once the corp policies are fixed to have the
AttestationEnabledForUser policy configured at the "mandatory",
not "recommended", level.

Bug: 1000589, b:142616571
Test: set the AttestationEnabledForUser to the recommended level, open corp cert enrollment extension's background page in DevTools, run "chromecert.Request.testOnly.getEuk("")", check that it doesn't fail with "Remote attestation is not enabled for your account."
Change-Id: I0087364882728fdc63e84a789313e525c24a21d0
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1865340
Commit-Queue: Maksim Ivanov <emaxx@chromium.org>
Auto-Submit: Maksim Ivanov <emaxx@chromium.org>
Reviewed-by: default avatarYves Arrouye <drcrash@chromium.org>
Cr-Commit-Position: refs/heads/master@{#706854}
parent 81ae0377
......@@ -227,7 +227,8 @@ bool TpmChallengeKeyImpl::IsRemoteAttestationEnabledForUser() const {
DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
PrefService* prefs = profile_->GetPrefs();
if (prefs && prefs->IsManagedPreference(prefs::kAttestationEnabled)) {
// TODO(crbug.com/1000589): Check it's mandatory after fixing corp policy.
if (prefs) {
return prefs->GetBoolean(prefs::kAttestationEnabled);
}
return false;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment