Only the device owner can change certain settings about chromium_os-raspberry_pi

[keo13579]

[pcs3rd]

@FydeOS (or @fydeos-alpha if this applies to you), could you provide a pre built image without device provisioning/management/ an existing user? It could be viewed as a security risk (What can be seen, what can be stolen, what can be done?). Not all of us have devices capable of compiling a build! Also, why is connecting Android devices disabled?

[pcs3rd]

Actually, @Void-Frost , This might work for us. Then do a powerwash if possible? I haven't played with it too much. But, how can there be two owners?

[keo13579]

Actually, @Void-Frost , This might work for us. Then do a powerwash if possible? I haven't played with it too much. But, how can there be two owners?

I don't know how there could be multiple owners but I have tried powerwashing, It says "Restart to powerwash, and then you will be asked to confirm" and I click okay, It restarts, and it gives the SAME message as before.

[keo13579]

Also what is the power button on fyde?

[keo13579]

@pcs3rd

[fydeos-alpha]

@Void-Frost Please note that this is Chromium OS for Pi that we are discussing here, not FydeOS. Therefore no Linux, no Android (there will never be Play which is proprietary to Google)

@pcs3rd device-provisioning / management wasn't intentional at the first place, as mentioned in the README, the image was built with vanilla Chromium branches and default build flags. In terms of security risk, the image provided here is of a TEST image, it's INSECURE by nature. You should never use this in any production or similar environment.

[keo13579]

@fydeos-alpha Why can't their be a way for the OWNER of the device to change the settings that he wants to? It's a test build anyways. Also, why not add Google play+Linux support?

[keo13579]

Also, @fydeos-alpha, what is the power button on Raspberry Pi Chromium OS?

[yunshansimon]

@fydeos-alpha Why can't their be a way for the OWNER of the device to change the settings that he wants to? It's a test build anyways. Also, why not add Google play+Linux support?

The first question, there need a TPM-chip or a software-TPM emulator to enable this feature which doesn't exist on RPi. The second, there are no such supporting from google. You can ask Google, I want to know the answer too.

[pcs3rd]

Sorry for the inactivity @Void-Frost I am not getting notifications or updates for this issue.
@fydeos-alpha, I do understand the concern with using this in production enviroments, but I use this on a home network for nothing valuable. (If my network were comprimised, the test build of chromeos would be less of concern than the pc I do taxes and whatnot on, but risk is still not voided). Also, on chromium os derevitives like cloudready, the feature (smart unlock) is available, it just does not work properly (probably because there is no hardware level tpm or authentication). Also @yunshansimon Here is something like what you are talking about.
and something more juicy
Sources here
and here

I don't know how there could be multiple owners but I have tried powerwashing, It says "Restart to powerwash, and then you will be asked to confirm" and I click okay, It restarts, and it gives the SAME message as before.

@Void-Frost, usually "this setting is enforced by the device owner" signifies another user than your own.

[Piflyer]

You could switch to canary by running live_in_a_coal_mine on crosh.