Follow Techotopia on Twitter

On-line Guides
All Guides
eBook Store
iOS / Android
Linux for Beginners
Office Productivity
Linux Installation
Linux Security
Linux Utilities
Linux Virtualization
Linux Kernel
System/Network Admin
Programming
Scripting Languages
Development Tools
Web Development
GUI Toolkits/Desktop
Databases
Mail Systems
openSolaris
Eclipse Documentation
Techotopia.com
Virtuatopia.com
Answertopia.com

How To Guides
Virtualization
General System Admin
Linux Security
Linux Filesystems
Web Servers
Graphics & Desktop
PC Hardware
Windows
Problem Solutions
Privacy Policy

  




 

 

SUSE Linux Enterprise Desktop Deployment Guide
Previous Page Home Next Page

9.11 Disabling GNOME Desktop Features

The GNOME Desktop includes features you can use to restrict access to certain of its functions. These disable (or lockdown) features let you restrict the actions that users can perform on a computer. For example, you might want to prevent command line operations on a computer that is for public use at a trade show.

You disable feature by setting GConf keys (see Using GConf for Defaults). You can also use the Configuration Editor application to set GConf keys in a user configuration source (see Configuration Editor).

9.11.1 Disabling Lock Screen and Log Out

To disable the lock screen and log out functions, set the /apps/panel/global/disable_lock_screen key and the /apps/panel/global/disable_log_out key to True.

When you disable the lock screen and log out functions, the following items are removed from the panels:

  • Lock Screen and Log Out user menu items from the Main Menu

  • Lock and Log Out menu items from the Add to Panel > Actions menu

    To open this menu, right-click a vacant space on a panel and then click Add to Panel > Actions.

  • Lock Screen and Log Out user menu items from the Actions menu in the Menu Bar applet

Additionally, any Lock Screen buttons and Log Out buttons on panels are disabled.

9.11.2 Disabling Command Line Operations

To disable operations from a command line, set the /desktop/gnome/lockdown/disable_command_line key to True.

When you disable command line operations, the following changes occur in the user interface:

  • The Run Application menu item is removed from the following menus:

    • Main Menu

    • Actions submenu in the Add to Panel menu

    • Actions menu in the Menu Bar applet

  • Any Run buttons on panels are disabled

To disable command line operations, you must also remove menu items that start terminal applications. For example, you might want to remove menu items that contain the following commands:

  • GNOME Terminal command (/opt/gnome/bin/gnome-terminal)

  • /usr/bin/xterm

  • /usr/bin/setterm

These items are removed from the following menus:

  • Main Menu

  • Add to Panel > Launcher From menu

To disable command line operations, you must also disable the Command Line applet. To disable this applet, add the applet to the /apps/panel/global/disabled_applets key. When you disable the Command Line applet, it is removed from the Main Menu and the Add to Panel > Utility menu.

9.11.3 Disabling Panel Configuration

To disable panel configuration, set the /apps/panel/global/locked_down key to True.

When you disable panel configuration, the following changes occur in the user interface:

  • The following items are removed from the Panel and Drawer pop-up menus:

    • Add to Panel

    • Delete This Panel

    • Properties

    • New Panel

  • The launcher popup menu is disabled.

  • The following items are removed from the Applet pop-up menu:

    • Remove from Panel

    • Lock

    • Move

  • The Main Menu pop-up menu is disabled.

  • The Launcher drag feature is disabled so that users cannot drag launchers to or from panels.

  • The Panel drag feature is disabled so that users cannot drag panels to new locations.

SUSE Linux Enterprise Desktop Deployment Guide
Previous Page Home Next Page

 
 
  Published under the terms of the Open Publication License Design by Interspire