Index: chrome/browser/chromeos/policy/device_local_account_policy_store.cc |
diff --git a/chrome/browser/chromeos/policy/device_local_account_policy_store.cc b/chrome/browser/chromeos/policy/device_local_account_policy_store.cc |
index 786a2c920f861ce4b88b89ec61561824729609e0..392cdf8eb9ce6061f7712f75dcbfd131604dbae3 100644 |
--- a/chrome/browser/chromeos/policy/device_local_account_policy_store.cc |
+++ b/chrome/browser/chromeos/policy/device_local_account_policy_store.cc |
@@ -101,6 +101,13 @@ void DeviceLocalAccountPolicyStore::UpdatePolicy( |
POLICY_SCOPE_USER, |
Value::CreateBooleanValue(true), |
NULL); |
+ // Force the |FullscreenAllowed| policy to |false|, ensuring that the ash |
+ // shelf cannot be hidden by entering fullscreen mode. |
+ policy_map_.Set(key::kFullscreenAllowed, |
+ POLICY_LEVEL_MANDATORY, |
+ POLICY_SCOPE_USER, |
+ Value::CreateBooleanValue(false), |
+ NULL); |
// Restrict device-local accounts to hosted apps for now (i.e. no extensions, |
// packaged apps etc.) for security/privacy reasons (i.e. we'd like to |
// prevent the admin from stealing private information from random people). |