Created attachment 13274 [details] Ошибка в Chromium и Yandex В Chromium и Yandex при обработке политики ExtensionSettings, получаем ошибку (см.вложение): Ошибка проверки схемы: Policy type mismatch: expected: "dictionary", actual: "string". Значение: {"hdokiejnpimakedhajhdlcegeplioahd": {"installation_mode": "force_installed","update_url": "https://clients2.google.com/service/update2/crx"}, "pioclpoplcdbaefihamjohnefbikjilc": {"installation_mode": "force_installed","update_url": "https://clients2.google.com/service/update2/crx"}} Содержимое файла /etc/chromium/policies/managed/policies.json: {"AuthServerAllowlist": "*.test.alt", "DiskCacheSize": 5000, "ExtensionSettings": "{\"hdokiejnpimakedhajhdlcegeplioahd\": {\"installation_mode\": \"force_installed\",\"update_url\": \"https://clients2.google.com/service/update2/crx\"}, \"pioclpoplcdbaefihamjohnefbikjilc\": {\"installation_mode\": \"force_installed\",\"update_url\": \"https://clients2.google.com/service/update2/crx\"}}", "HomepageLocation": "https://docs.altlinux.org", "ShowHomeButton": false} При этом для Firefox политика успешно применяется, хотя в /etc/firefox/policies/policies.json значения политики тоже записаны как строка: "ExtensionSettings": "{\n\t\"*\": {\n\t\t\"blocked_install_message\": \"Custom error message\"\n\t},\n\t\"adblockultimate@adblockultimate.net\": {\n\t\t\"installation_mode\": \"force_installed\",\n\t\t\"install_url\": \"file:///home/user/adblockultimate@adblockultimate.net.xpi\"\n\t},\n\t\"rutokenplugin@rutoken.ru\": {\n\t\t\"installation_mode\": \"force_installed\",\n\t\t\"install_url\": \"https://addons.mozilla.org/firefox/downloads/file/3450175/adapter_rutoken_plugin-1.0.5.0.xpi\"\n\t}\n}"
gpupdate-0.16.4-alt1 -> sisyphus: Thu Oct 15 2026 Valery Sinelnikov <greh@altlinux> 0.16.4-alt1 - Added: gpupdate-machine-run for commands with isolated machine Kerberos credentials (closes: 60548) GPO-configurable user policy refresh on SSH login (closes: 53161) Chromium 153 integer-valued policy exceptions Optional strict exit status for policy scripts - Fixed: User file policies creating root-owned home directories (closes: 48946) KDE policy application without a graphical environment (closes: 60718) Missing icon and comment in merged machine shortcuts (closes: 60563) GNOME and XFCE shortcut trust metadata (closes: 56019) Absolute local script paths (closes: 47135) Structured Chromium and Yandex JSON preservation through dconf (closes: 46281) Yandex numeric policy types for delays, limits and import settings ADMX numeric-value extraction for decimal elements and enums Packaged display manager plugin discovery and safe GDM background updates LightDM greeter detection and native INI configuration User polkit rule isolation, plugin execution and privilege-worker IPC GPO cache identity, FreeIPA refresh handling and loopback precedence Policy-scoped and per-user apply-once state, managed-file and hidden cleanup Cached policy application File-operation safety, bounded worker IPC and command-group cleanup Kerberos credential isolation and LAPS retry post-actions Native DWORD handling in Firewall and NTP, standalone GSettings lock updates Script preparation failures and active timer shutdown when disabling gpupdate Browser policy publication and GDM restoration across theme upgrades Configuration preservation on upgrade and policy execution error reporting - Packaging: Ship shared applier templates with gpoa-lib - Documentation: Clarified plugin translation paths and documented regression test scenarios
