| 1 | <policyDefinitions revision="1.0" schemaVersion="1.0"> |
| 2 | <policyNamespaces> |
| 3 | <target prefix="WSL" namespace="Microsoft.WSL" /> |
| 4 | <using prefix="windows" namespace="Microsoft.Policies.Windows" /> |
| 5 | |
| 6 | </policyNamespaces> |
| 7 | <resources minRequiredRevision="0.1" fallbackCulture="en-US"/> |
| 8 | <categories> |
| 9 | <category name="WSL" displayName="$(string.WindowsSubsystemForLinux)"/> |
| 10 | <category name="WSLContainer" displayName="$(string.WSLContainer)"> |
| 11 | <parentCategory ref="WSL" /> |
| 12 | </category> |
| 13 | </categories> |
| 14 | <policies> |
| 15 | <policy name="AllowWSL" class="Machine" displayName="$(string.AllowWSL)" explainText="$(string.AllowWSLExplain)" key="Software\Policies\WSL" valueName="AllowWSL"> |
| 16 | <parentCategory ref="WSL" /> |
| 17 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 18 | <enabledValue> |
| 19 | <decimal value="1" /> |
| 20 | </enabledValue> |
| 21 | <disabledValue> |
| 22 | <decimal value="0" /> |
| 23 | </disabledValue> |
| 24 | </policy> |
| 25 | |
| 26 | <policy name="AllowInboxWSL" class="Machine" displayName="$(string.AllowInboxWSL)" explainText="$(string.AllowInboxWSLExplain)" key="Software\Policies\WSL" valueName="AllowInboxWSL"> |
| 27 | <parentCategory ref="WSL" /> |
| 28 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 29 | <enabledValue> |
| 30 | <decimal value="1" /> |
| 31 | </enabledValue> |
| 32 | <disabledValue> |
| 33 | <decimal value="0" /> |
| 34 | </disabledValue> |
| 35 | </policy> |
| 36 | |
| 37 | <policy name="AllowWSL1" class="Machine" displayName="$(string.AllowWSL1)" explainText="$(string.AllowWSL1Explain)" key="Software\Policies\WSL" valueName="AllowWSL1"> |
| 38 | <parentCategory ref="WSL" /> |
| 39 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 40 | <enabledValue> |
| 41 | <decimal value="1" /> |
| 42 | </enabledValue> |
| 43 | <disabledValue> |
| 44 | <decimal value="0" /> |
| 45 | </disabledValue> |
| 46 | </policy> |
| 47 | |
| 48 | <policy name="CustomKernelUserSettingConfigurable" class="Machine" displayName="$(string.CustomKernelUserSettingConfigurable)" explainText="$(string.CustomKernelExplain)" key="Software\Policies\WSL" valueName="AllowKernelUserSetting"> |
| 49 | <parentCategory ref="WSL" /> |
| 50 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 51 | <enabledValue> |
| 52 | <decimal value="1" /> |
| 53 | </enabledValue> |
| 54 | <disabledValue> |
| 55 | <decimal value="0" /> |
| 56 | </disabledValue> |
| 57 | </policy> |
| 58 | |
| 59 | <policy name="CustomSystemDistroUserSettingConfigurable" class="Machine" displayName="$(string.CustomSystemDistroUserSettingConfigurable)" explainText="$(string.CustomSystemDistroExplain)" key="Software\Policies\WSL" valueName="AllowSystemDistroUserSetting"> |
| 60 | <parentCategory ref="WSL" /> |
| 61 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 62 | <enabledValue> |
| 63 | <decimal value="1" /> |
| 64 | </enabledValue> |
| 65 | <disabledValue> |
| 66 | <decimal value="0" /> |
| 67 | </disabledValue> |
| 68 | </policy> |
| 69 | |
| 70 | <policy name="CustomKernelCommandLineUserSettingConfigurable" class="Machine" displayName="$(string.CustomKernelCommandLineUserSettingConfigurable)" explainText="$(string.CustomKernelCommandLineExplain)" key="Software\Policies\WSL" valueName="AllowKernelCommandLineUserSetting"> |
| 71 | <parentCategory ref="WSL" /> |
| 72 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 73 | <enabledValue> |
| 74 | <decimal value="1" /> |
| 75 | </enabledValue> |
| 76 | <disabledValue> |
| 77 | <decimal value="0" /> |
| 78 | </disabledValue> |
| 79 | </policy> |
| 80 | |
| 81 | <policy name="AllowDebugShell" class="Machine" displayName="$(string.AllowDebugShell)" explainText="$(string.AllowDebugShellExplain)" key="Software\Policies\WSL" valueName="AllowDebugShell"> |
| 82 | <parentCategory ref="WSL" /> |
| 83 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 84 | <enabledValue> |
| 85 | <decimal value="1" /> |
| 86 | </enabledValue> |
| 87 | <disabledValue> |
| 88 | <decimal value="0" /> |
| 89 | </disabledValue> |
| 90 | </policy> |
| 91 | |
| 92 | <policy name="NestedVirtualizationUserSettingConfigurable" class="Machine" displayName="$(string.NestedVirtualizationUserSettingConfigurable)" explainText="$(string.NestedVirtualizationExplain)" key="Software\Policies\WSL" valueName="AllowNestedVirtualization"> |
| 93 | <parentCategory ref="WSL" /> |
| 94 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 95 | <enabledValue> |
| 96 | <decimal value="1" /> |
| 97 | </enabledValue> |
| 98 | <disabledValue> |
| 99 | <decimal value="0" /> |
| 100 | </disabledValue> |
| 101 | </policy> |
| 102 | |
| 103 | <policy name="KernelDebugUserSettingConfigurable" class="Machine" displayName="$(string.KernelDebugUserSettingConfigurable)" explainText="$(string.KernelDebugExplain)" key="Software\Policies\WSL" valueName="AllowKernelDebugUserSetting"> |
| 104 | <parentCategory ref="WSL" /> |
| 105 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 106 | <enabledValue> |
| 107 | <decimal value="1" /> |
| 108 | </enabledValue> |
| 109 | <disabledValue> |
| 110 | <decimal value="0" /> |
| 111 | </disabledValue> |
| 112 | </policy> |
| 113 | |
| 114 | <policy name="CustomNetworkingUserSettingConfigurable" class="Machine" displayName="$(string.CustomNetworkingUserSettingConfigurable)" explainText="$(string.CustomNetworkingExplain)" key="Software\Policies\WSL" valueName="AllowNetworkingModeUserSetting"> |
| 115 | <parentCategory ref="WSL" /> |
| 116 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 117 | <enabledValue> |
| 118 | <decimal value="1" /> |
| 119 | </enabledValue> |
| 120 | <disabledValue> |
| 121 | <decimal value="0" /> |
| 122 | </disabledValue> |
| 123 | </policy> |
| 124 | |
| 125 | <policy name="FirewallUserSettingConfigurable" class="Machine" displayName="$(string.FirewallUserSettingConfigurable)" explainText="$(string.FirewallExplain)" key="Software\Policies\WSL" valueName="AllowFirewallUserSetting"> |
| 126 | <parentCategory ref="WSL" /> |
| 127 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 128 | <enabledValue> |
| 129 | <decimal value="1" /> |
| 130 | </enabledValue> |
| 131 | <disabledValue> |
| 132 | <decimal value="0" /> |
| 133 | </disabledValue> |
| 134 | </policy> |
| 135 | |
| 136 | <policy name="AllowDiskMount" class="Machine" displayName="$(string.AllowDiskMount)" explainText="$(string.AllowDiskMountExplain)" key="Software\Policies\WSL" valueName="AllowDiskMount"> |
| 137 | <parentCategory ref="WSL" /> |
| 138 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 139 | <enabledValue> |
| 140 | <decimal value="1" /> |
| 141 | </enabledValue> |
| 142 | <disabledValue> |
| 143 | <decimal value="0" /> |
| 144 | </disabledValue> |
| 145 | </policy> |
| 146 | |
| 147 | <policy name="DefaultNetworkingMode" class="Machine" displayName="$(string.DefaultNetworkingMode)" explainText="$(string.DefaultNetworkingModeExplain)" presentation="$(presentation.DefaultNetworkingMode)" key="Software\Policies\WSL" valueName="DefaultNetworkingMode"> |
| 148 | <parentCategory ref="WSL" /> |
| 149 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 150 | <elements> |
| 151 | <enum id="DefaultNetworkingMode_Dropdown" valueName="DefaultNetworkingMode"> |
| 152 | <item displayName="$(string.NetworkingModeNone)"> |
| 153 | <value> |
| 154 | <decimal value="0" /> |
| 155 | </value> |
| 156 | </item> |
| 157 | <item displayName="$(string.NetworkingModeNAT)"> |
| 158 | <value> |
| 159 | <decimal value="1" /> |
| 160 | </value> |
| 161 | </item> |
| 162 | <!-- Bridged networking is intentionally left out because it requires additional configuration --> |
| 163 | <item displayName="$(string.NetworkingModeMirrored)"> |
| 164 | <value> |
| 165 | <decimal value="3" /> |
| 166 | </value> |
| 167 | </item> |
| 168 | <item displayName="$(string.NetworkingModeVirtioProxy)"> |
| 169 | <value> |
| 170 | <decimal value="4" /> |
| 171 | </value> |
| 172 | </item> |
| 173 | </enum> |
| 174 | </elements> |
| 175 | </policy> |
| 176 | |
| 177 | <!-- WSL Container Policies --> |
| 178 | |
| 179 | <policy name="AllowWSLContainer" class="Machine" displayName="$(string.AllowWSLContainer)" explainText="$(string.AllowWSLContainerExplain)" key="Software\Policies\WSL" valueName="AllowWSLContainer"> |
| 180 | <parentCategory ref="WSLContainer" /> |
| 181 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 182 | <enabledValue> |
| 183 | <decimal value="1" /> |
| 184 | </enabledValue> |
| 185 | <disabledValue> |
| 186 | <decimal value="0" /> |
| 187 | </disabledValue> |
| 188 | </policy> |
| 189 | |
| 190 | <policy name="AllowWSLContainerPrivileged" class="Machine" displayName="$(string.AllowWSLContainerPrivileged)" explainText="$(string.AllowWSLContainerPrivilegedExplain)" key="Software\Policies\WSL" valueName="AllowWSLContainerPrivileged"> |
| 191 | <parentCategory ref="WSLContainer" /> |
| 192 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 193 | <enabledValue> |
| 194 | <decimal value="1" /> |
| 195 | </enabledValue> |
| 196 | <disabledValue> |
| 197 | <decimal value="0" /> |
| 198 | </disabledValue> |
| 199 | </policy> |
| 200 | |
| 201 | <policy name="WSLContainerRegistryAllowlist" class="Machine" displayName="$(string.WSLContainerRegistryAllowlist)" explainText="$(string.WSLContainerRegistryAllowlistExplain)" presentation="$(presentation.WSLContainerRegistryAllowlist)" key="Software\Policies\WSL"> |
| 202 | <parentCategory ref="WSLContainer" /> |
| 203 | <supportedOn ref="windows:SUPPORTED_Windows10" /> |
| 204 | <elements> |
| 205 | <list id="WSLContainerRegistryAllowlist_Input" key="Software\Policies\WSL\WSLContainerRegistryAllowlist" valuePrefix="AllowedRegistry" /> |
| 206 | </elements> |
| 207 | </policy> |
| 208 | |
| 209 | </policies> |
| 210 | </policyDefinitions> |