| SUSE Linux Enterprise Desktop Documentation Chapter 10. GNOME Configuration for Administrators / 10.11. Disabling GNOME Desktop Features | ||||
|---|---|---|---|---|
 | 10.10. Security Note on Configuring SMB Printers | 10.12. Starting Applications Automatically |  | |
| SUSE Linux Enterprise Desktop Documentation Chapter 10. GNOME Configuration for Administrators / 10.11. Disabling GNOME Desktop Features | ||||
|---|---|---|---|---|
| 10.10. Security Note on Configuring SMB Printers | 10.12. Starting Applications Automatically | | |
The GNOME Desktop includes features you can use to restrict access to certain of its functions. These disable (or lockdown) features let you restrict the actions that users can perform on a computer. For example, you might want to prevent command line operations on a computer that is for public use at a trade show.
You disable feature by setting GConf keys (see Section 10.1, “Using GConf for Defaults”). You can also use the Configuration Editor application to set GConf keys in a user configuration source (see Section 10.1.8, “Configuration Editor”).
To disable the lock screen and log out functions, set the
/apps/panel/global/disable_lock_screen key and the
/apps/panel/global/disable_log_out key to True.
When you disable the lock screen and log out functions, the following items are removed from the panels:
Lock Screen and Log Out user menu items from the Main Menu
Lock and Log Out menu items from the Add to Panel > Actions menu
To open this menu, right-click a vacant space on a panel and then click .
Lock Screen and Log Out user menu items from the Actions menu in the Menu Bar applet
Additionally, any Lock Screen buttons and Log Out buttons on panels are disabled.
To disable operations from a command line, set the
/desktop/gnome/lockdown/disable_command_line key to True.
When you disable command line operations, the following changes occur in the user interface:
The Run Application menu item is removed from the following menus:
Main Menu
Actions submenu in the Add to Panel menu
Actions menu in the Menu Bar applet
Any Run buttons on panels are disabled
To disable command line operations, you must also remove menu items that start terminal applications. For example, you might want to remove menu items that contain the following commands:
GNOME Terminal command ( /opt/gnome/bin/gnome-terminal)
/usr/bin/xterm
/usr/bin/setterm
These items are removed from the following menus:
Main Menu
Add to Panel > Launcher From menu
To disable command line operations, you must also disable the Command Line applet. To
disable this applet, add the applet to the /apps/panel/global/disabled_applets
key. When you disable the Command Line applet, it is removed from the Main Menu and the Add to
Panel > Utility menu.
To disable panel configuration, set the /apps/panel/global/locked_down key
to True.
When you disable panel configuration, the following changes occur in the user interface:
The following items are removed from the Panel and Drawer pop-up menus:
Add to Panel
Delete This Panel
Properties
New Panel
The launcher popup menu is disabled.
The following items are removed from the Applet pop-up menu:
Remove from Panel
Lock
Move
The Main Menu pop-up menu is disabled.
The Launcher drag feature is disabled so that users cannot drag launchers to or from panels.
The Panel drag feature is disabled so that users cannot drag panels to new locations.
