Lock down chromium policy

2026-06-17 22:52:18 +00:00
parent 0fdc7980cc
commit 838ffd600b
4 changed files with 63 additions and 1 deletions
@@ -0,0 +1,34 @@
+{
+  "_comment": "Chromium managed policy for the diskless kiosk. Installed to /etc/chromium/policies/managed/. Stops Chromium phoning home to *.google.com / *.googleapis.com (sign-in, variations, optimization guide, component/auto updates, metrics, safe browsing) — none of which a fixed-URL kiosk needs. Pairs with the hardening flags in kiosk-session. Unknown keys are ignored by Chromium, so this is forward/backward safe.",
+
+  "MetricsReportingEnabled": false,
+  "UrlKeyedAnonymizedDataCollectionEnabled": false,
+  "DeviceMetricsReportingEnabled": false,
+
+  "BrowserSignin": 0,
+  "SyncDisabled": true,
+
+  "SafeBrowsingProtectionLevel": 0,
+  "SafeBrowsingExtendedReportingEnabled": false,
+
+  "ComponentUpdatesEnabled": false,
+  "ChromeVariations": 2,
+  "BrowserNetworkTimeQueriesEnabled": false,
+
+  "SearchSuggestEnabled": false,
+  "DefaultSearchProviderEnabled": false,
+  "SpellCheckServiceEnabled": false,
+  "TranslateEnabled": false,
+  "NetworkPredictionOptions": 2,
+
+  "BackgroundModeEnabled": false,
+  "PromotionalTabsEnabled": false,
+  "WelcomePageOnOSUpgradeEnabled": false,
+  "DefaultBrowserSettingEnabled": false,
+
+  "AutofillAddressEnabled": false,
+  "AutofillCreditCardEnabled": false,
+  "PasswordManagerEnabled": false,
+  "ShoppingListEnabled": false,
+  "EnableMediaRouter": false
+}