| Index: chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| diff --git a/chrome/browser/chromeos/policy/device_local_account_policy_store.cc b/chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| index 786a2c920f861ce4b88b89ec61561824729609e0..aa627d8990194f4b8c85b100e56275158c7dabc0 100644
|
| --- a/chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| +++ b/chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| @@ -101,6 +101,13 @@ void DeviceLocalAccountPolicyStore::UpdatePolicy(
|
| POLICY_SCOPE_USER,
|
| Value::CreateBooleanValue(true),
|
| NULL);
|
| + // Force the |AllowFullscreen| policy to |false|, ensuring that the ash shelf
|
| + // cannot be hidden by entering fullscreen mode.
|
| + policy_map_.Set(key::kAllowFullscreen,
|
| + POLICY_LEVEL_MANDATORY,
|
| + POLICY_SCOPE_USER,
|
| + Value::CreateBooleanValue(false),
|
| + NULL);
|
| // Restrict device-local accounts to hosted apps for now (i.e. no extensions,
|
| // packaged apps etc.) for security/privacy reasons (i.e. we'd like to
|
| // prevent the admin from stealing private information from random people).
|
|
|