Add opt-in ability to factory reset phone after some failed logins

[Michael Terry]

Per design:
https://docs.google.com/a/canonical.com/document/d/1VajNkWbBH61iVixXJAmOvNGiG__GWQTMXGNOZijXWJw/edit#heading=h.6zhf6wqejmh6
(search for "passcode incorrect")

They want us to factory-reset the phone after 10 failed attempts.

[Pat McGowan (pat-mcgowan)]

I assume this is added here to provide an opt in toggle under security and privacy, do we have language for that toggle?

[Matthew Paul Thomas (mpt)]

I'd be happy to add an option for this, but I don't see anything in the greeter document that says it should be optional. What would happen if the option was turned off?

[Michael Terry (mterry)]

@Pat, We don't have language for the toggle yet.

@mpt, the greeter spec doesn't list it as optional, but after going back and forth with security and design, security nixed the idea of it being on by default. So design wanted it opt-in. But security is still slightly squeamish about that. I think they are still ironing it out.

If the option is turned off, we just wouldn't factory reset the phone after 10 failed attempts. :)

[Michael Terry (mterry)]

The unity8 side of this is ready, just needs to be plugged into a backend.

[kevin gunn (kgunn72)]

marking fixed for unity8

[Michael Terry (mterry)]

Eh... Not entirely fixed for unity8. The plumbing is there, but it's not hooked into any settings backend. But that doesn't matter as long as the user can't turn it on anyway. So yeah, nothing more to do on unity8 side for now.