Re: Per-user mandatory lockdown policies with dconf. Is it possible?
José Félix Ontañon <[email protected]> Wed, 28 May 2014 11:36:46 +0200
| Newsgroups | gmane.comp.gnome.lib.gconf,gmane.comp.gnome.devel |
|---|---|
| Message-ID | <CAJjEPcHE3nL7L+TdFyMzpGAJ1_UUupV0qDnjsn6ZHxW8MwWR3g@mail.gmail.com> |
--===============0949414219947510281== Content-Type: multipart/alternative; boundary=001a1133d894461cf504fa728e8b --001a1133d894461cf504fa728e8b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, As an alternative approach, I tried to implement per-user lockdown policies playing with user-space locals dconf-dbs. I'm afraid the following isn't working too: >>> /etc/dconf/profile/user user-db:user >>> ~/.config/dconf/user.db/user.key [org.gnome.desktop.lockdown] disable-log-out=3D'true' >>> ~/.config/dconf/user.db/locks/disable-log-out.lock /org/gnome/desktop/lockdown/disable-log-out Then run dconf update and restart desktop session. Any clarification would be welcomed. Thanks in advance. 2014-05-23 12:46 GMT+02:00 Jos=C3=A9 F=C3=A9lix Onta=C3=B1on <fontanon@emer= gya.com>: > Hi, > > First, I don't know which is the right mailing list to post the following > question. Otherwise, please tell me where to do. > Sorry for crossposting. > > After following the instructions given by the official documentation, I > managed to set system-wide mandatory settings with dconf, but I've seriou= s > doubt whether is possible to create a per-user schema of mandatory settin= gs > with dconf. > > https://wiki.gnome.org/action/show/Projects/dconf/SystemAdministrators > > So, the question: is it dconf prepared for configuring mandatory > user-level lockdown policies? I mean, so once a setting is configured, th= e > user wouldn't have the chance to modify it. > > Below two examples of configuration used: (1) a successful conf. for > locking down the desktop-background system-wide (no local user could be > able to change it), and (2) an unsuccessful try of having different > lockdown policies for two different users. > > Any clarification would be welcomed. > > Works! --- Example 1: locking down desktop-background system-wide --- > > >>> /etc/dconf/profile/user > user-db:user > system-db:local > > >>> /etc/dconf/db/local.d/locks > /org/gnome/desktop/background/picture-uri > > Then run dconf update and restart desktop session. > > -------------------- > > Not working :( --- Example 2: locking down desktop-background to test1 > user, locking down disable-log-out to test2 user --- > > >>> /etc/dconf/profile/test1 > user-db:user > system-db:test1 > > >>> /etc/dconf/profile/test2 > user-db:user > system-db:test2 > > >>> /etc/dconf/db/test1.d/locks > /org/gnome/desktop/background/picture-uri > > >>> /etc/dconf/db/test2.d/locks > /org/gnome/desktop/lockdown/disable-log-out > > Then run dconf update, ensure test1 and test2 has defined the > DCONF_PROFILE env variable with their username, and restart desktop sessi= on. > > -- > J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona > Consultor Externo > > Emergya Consultor=C3=ADa > Tfno: +34 954 51 75 77 / +34 661 91 27 26 > Fax: +34 954 51 64 73 > www.emergya.es > --=20 J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona Consultor Externo Emergya Consultor=C3=ADa Tfno: +34 954 51 75 77 / +34 661 91 27 26 Fax: +34 954 51 64 73 www.emergya.es --001a1133d894461cf504fa728e8b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hi,=C2=A0<div><br></div><div>As an alternative approach, I= tried to implement per-user lockdown policies playing with user-space loca= ls dconf-dbs.</div><div>I'm afraid the following isn't working too:= </div> <div><br></div><div><div style=3D"font-family:arial,sans-serif;font-size:13= px">>>> /etc/dconf/profile/user</div><div style=3D"font-family:ari= al,sans-serif;font-size:13px"><div>user-db:user</div><div><br></div><div>&g= t;>> ~/.config/dconf/user.db/user.key<br> </div><div>[org.gnome.desktop.lockdown]</div><div>disable-log-out=3D'tr= ue'</div><div><br></div><div><div>>>> ~/.config/dconf/user.db/= locks/disable-log-out.lock</div><div>/org/gnome/desktop/lockdown/disable-lo= g-out</div> </div><div><br></div><div>Then run dconf update and restart desktop session= .<br></div><div><br></div><div>Any clarification would be welcomed.=C2=A0</= div><div>Thanks in advance.</div><div><div class=3D""></div></div></div></d= iv> </div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">2014-05= -23 12:46 GMT+02:00 Jos=C3=A9 F=C3=A9lix Onta=C3=B1on <span dir=3D"ltr"><= ;<a href=3D"mailto:[email protected]" target=3D"_blank">fontanon@emergya= .com</a>></span>:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div>Hi,=C2=A0</div><div><b= r></div><div>First, I don't know which is the right mailing list to pos= t the following question. Otherwise, please tell me where to do.</div> <div>Sorry for crossposting.</div><div><br> </div><div>After following the instructions given by the official documenta= tion, I managed to set system-wide mandatory settings with dconf, but I'= ;ve serious doubt whether is possible to create a per-user schema of mandat= ory settings with dconf.</div> <div><br></div><div><a href=3D"https://wiki.gnome.org/action/show/Projects/= dconf/SystemAdministrators" target=3D"_blank">https://wiki.gnome.org/action= /show/Projects/dconf/SystemAdministrators</a><br></div><div><br></div><div> So, the question: is it dconf prepared for configuring mandatory user-level= lockdown policies? I mean, so once a setting is configured, the user would= n't have the chance to modify it.</div> <div><br></div><div>Below two examples of configuration used: (1) a success= ful conf. for locking down the desktop-background system-wide (no local use= r could be able to change it), and (2) an unsuccessful try of having differ= ent lockdown policies for two different users.</div> <div><br></div><div>Any clarification would be welcomed.</div><div><br></di= v><div>Works! --- Example 1: locking down desktop-background system-wide --= -</div><div><br></div><div>>>> /etc/dconf/profile/user</div><div> <div>user-db:user</div><div>system-db:local</div><div><br></div></div><div>= >>>=C2=A0/etc/dconf/db/local.d/locks</div><div><div>/org/gnome/des= ktop/background/picture-uri</div></div><div><br></div><div>Then run dconf u= pdate and restart desktop session.</div> <div><br></div><div>--------------------</div><div><br></div><div>Not worki= ng :( --- Example 2: locking down desktop-background to test1 user, locking= down disable-log-out to test2 user ---<br></div><div><br></div><div><div> >>> /etc/dconf/profile/test1</div><div><div>user-db:user</div><div= >system-db:test1</div><div><div><br></div><div>>>> /etc/dconf/prof= ile/test2</div><div><div>user-db:user</div><div>system-db:test2</div></div> </div></div></div><div><br></div><div><div>>>>=C2=A0/etc/dconf/db/= test1.d/locks</div><div>/org/gnome/desktop/background/picture-uri</div></di= v><div><br></div><div><div>>>>=C2=A0/etc/dconf/db/test2.d/locks</d= iv><div> /org/gnome/desktop/lockdown/disable-log-out</div></div><div><br></div><div>= <div>Then run dconf update, ensure test1 and test2 has defined the DCONF_PR= OFILE env variable with their username, and restart desktop session.</div> <span class=3D"HOEnZb"><font color=3D"#888888"> </font></span></div><span class=3D"HOEnZb"><font color=3D"#888888"><div><br= >-- <br><div dir=3D"ltr">J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona<br>Consult= or Externo<br><br>Emergya Consultor=C3=ADa <br>Tfno: <a href=3D"tel:%2B34%2= 0954%2051%2075%2077" value=3D"+34954517577" target=3D"_blank">+34 954 51 75= 77</a> / <a href=3D"tel:%2B34%20661%2091%2027%2026" value=3D"+34661912726"= target=3D"_blank">+34 661 91 27 26</a><br> Fax: <a href=3D"tel:%2B34%20954%2051%2064%2073" value=3D"+34954516473" targ= et=3D"_blank">+34 954 51 64 73</a><br><a href=3D"http://www.emergya.es" tar= get=3D"_blank">www.emergya.es</a></div> </div></font></span></div> </blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div dir=3D"= ltr">J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona<br>Consultor Externo<br><br>Em= ergya Consultor=C3=ADa <br>Tfno: +34 954 51 75 77 / +34 661 91 27 26<br>Fax= : +34 954 51 64 73<br> <a href=3D"http://www.emergya.es" target=3D"_blank">www.emergya.es</a></div= > </div> --001a1133d894461cf504fa728e8b-- --===============0949414219947510281== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ gconf-list mailing list [email protected] https://mail.gnome.org/mailman/listinfo/gconf-list --===============0949414219947510281==--