2046079 - [meta] Live Policies Support

Status: NEW

(Enterprise Products :: Firefox, task, P1)

Description

[Janika Neuberger [:janika]]

The policy engine fetches remote policies from the console periodically. It parses the policies and applies new policies, policy updates and policy removals.

A live policy is a policy with the following characteristics:

• The policy can be applied on** and after startup.
• The policy can be updated live***.
• The policy can be removed live***.

** this is the default behavior as the policy engine in non-enterprise builds always applies them on startup.
*** "live" meaning the policy is correctly applied without requiring a browser restart.

The goal is to support a set of verified live policies that an admin can trust to be correctly applied live. This capability will be reflected in the policies-schema.json for each policy with an extra key, e.g. live=true|false). All other policies require a restart.

Comment 1

[Janika Neuberger [:janika]]

Execution Plan for Live Policies Support

1. Analyze QA results of previous live policy testing (Bug 2046397)
2. Triage policies and define the set of policies X to be required live (Bug 2046397)
3. QA to verify set of live policies X (Bug 2046449)
4. Add live capabilities for policies in X that QA found to be non-live (Bug 2046454)
5. Work out set of policies Y that we’re highly confident to be live appliable (Bug 2046457)
6. Add live capabilities to policies Y (Bug 2046460)
7. QA to verify set of live policies Y (Bug 2046460)
8. Flag live policies with extra key live in policies-schema.json (Bug 2046462)
9. Cleanup live capabilities from any unverified policies (Bug 2046464)