caption: Allow unaffiliated users to use Crostini
default: true
desc: Setting the policy to Enabled or leaving it unset lets all users use <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>
  as long as all 3 policies, <ph name="VIRTUAL_MACHINES_ALLOWED_POLICY_NAME">VirtualMachinesAllowed</ph>,
  <ph name="CROSTINI_ALLOWED_POLICY_NAME">CrostiniAllowed</ph>, and <ph name="DEVICE_UNAFFILIATED_CROSTINI_ALLOWED_POLICY_NAME">DeviceUnaffiliatedCrostiniAllowed</ph>
  are set to Enabled. Setting the policy to Disabled means unaffiliated users can't
  use <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>. Changing it to Disabled starts
  applying the policy to starting new <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>
  containers, not those already running.
device_only: true
example_value: false
features:
  dynamic_refresh: true
items:
- caption: Allow unaffiliated users to use virtual machines needed to support Linux
    apps
  value: true
- caption: Do not allow unaffiliated users to use virtual machines needed to support
    Linux apps
  value: false
owners:
- timzheng@chromium.org
- aoldemeier@chromium.org
schema:
  type: boolean
supported_on:
- chrome_os:70-
tags:
- system-security
type: main
generate_device_proto: False
