| Index: chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| diff --git a/chrome/browser/chromeos/policy/device_local_account_policy_store.cc b/chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| index 786a2c920f861ce4b88b89ec61561824729609e0..392cdf8eb9ce6061f7712f75dcbfd131604dbae3 100644
|
| --- a/chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| +++ b/chrome/browser/chromeos/policy/device_local_account_policy_store.cc
|
| @@ -101,6 +101,13 @@ void DeviceLocalAccountPolicyStore::UpdatePolicy(
|
| POLICY_SCOPE_USER,
|
| Value::CreateBooleanValue(true),
|
| NULL);
|
| + // Force the |FullscreenAllowed| policy to |false|, ensuring that the ash
|
| + // shelf cannot be hidden by entering fullscreen mode.
|
| + policy_map_.Set(key::kFullscreenAllowed,
|
| + POLICY_LEVEL_MANDATORY,
|
| + POLICY_SCOPE_USER,
|
| + Value::CreateBooleanValue(false),
|
| + NULL);
|
| // Restrict device-local accounts to hosted apps for now (i.e. no extensions,
|
| // packaged apps etc.) for security/privacy reasons (i.e. we'd like to
|
| // prevent the admin from stealing private information from random people).
|
|
|