Re: Per-user mandatory lockdown policies with dconf. Is it possible?
José Félix Ontañon <[email protected]> Wed, 28 May 2014 12:34:02 +0200
| Newsgroups | gmane.comp.gnome.lib.gconf,gmane.comp.gnome.devel |
|---|---|
| Message-ID | <CAJjEPcExNSaghPsnNat7McWaBUN0QSeW35yjDVU-GeOpzLobYA@mail.gmail.com> |
--===============8560918593678226789== Content-Type: multipart/alternative; boundary=001a113a9ba805b28b04fa735b65 --001a113a9ba805b28b04fa735b65 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Sorry for the mistake, I mean "user.d" rather tnan "user.db". Thanks 2014-05-28 11:36 GMT+02:00 Jos=C3=A9 F=C3=A9lix Onta=C3=B1on <fontanon@emer= gya.com>: > Hi, > > As an alternative approach, I tried to implement per-user lockdown > policies playing with user-space locals dconf-dbs. > I'm afraid the following isn't working too: > > >>> /etc/dconf/profile/user > user-db:user > > >>> ~/.config/dconf/user.db/user.key > [org.gnome.desktop.lockdown] > disable-log-out=3D'true' > > >>> ~/.config/dconf/user.db/locks/disable-log-out.lock > /org/gnome/desktop/lockdown/disable-log-out > > Then run dconf update and restart desktop session. > > Any clarification would be welcomed. > Thanks in advance. > > > 2014-05-23 12:46 GMT+02:00 Jos=C3=A9 F=C3=A9lix Onta=C3=B1on <fontanon@em= ergya.com>: > > Hi, >> >> First, I don't know which is the right mailing list to post the followin= g >> question. Otherwise, please tell me where to do. >> Sorry for crossposting. >> >> After following the instructions given by the official documentation, I >> managed to set system-wide mandatory settings with dconf, but I've serio= us >> doubt whether is possible to create a per-user schema of mandatory setti= ngs >> with dconf. >> >> https://wiki.gnome.org/action/show/Projects/dconf/SystemAdministrators >> >> So, the question: is it dconf prepared for configuring mandatory >> user-level lockdown policies? I mean, so once a setting is configured, t= he >> user wouldn't have the chance to modify it. >> >> Below two examples of configuration used: (1) a successful conf. for >> locking down the desktop-background system-wide (no local user could be >> able to change it), and (2) an unsuccessful try of having different >> lockdown policies for two different users. >> >> Any clarification would be welcomed. >> >> Works! --- Example 1: locking down desktop-background system-wide --- >> >> >>> /etc/dconf/profile/user >> user-db:user >> system-db:local >> >> >>> /etc/dconf/db/local.d/locks >> /org/gnome/desktop/background/picture-uri >> >> Then run dconf update and restart desktop session. >> >> -------------------- >> >> Not working :( --- Example 2: locking down desktop-background to test1 >> user, locking down disable-log-out to test2 user --- >> >> >>> /etc/dconf/profile/test1 >> user-db:user >> system-db:test1 >> >> >>> /etc/dconf/profile/test2 >> user-db:user >> system-db:test2 >> >> >>> /etc/dconf/db/test1.d/locks >> /org/gnome/desktop/background/picture-uri >> >> >>> /etc/dconf/db/test2.d/locks >> /org/gnome/desktop/lockdown/disable-log-out >> >> Then run dconf update, ensure test1 and test2 has defined the >> DCONF_PROFILE env variable with their username, and restart desktop sess= ion. >> >> -- >> J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona >> Consultor Externo >> >> Emergya Consultor=C3=ADa >> Tfno: +34 954 51 75 77 / +34 661 91 27 26 >> Fax: +34 954 51 64 73 >> www.emergya.es >> > > > > -- > J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona > Consultor Externo > > Emergya Consultor=C3=ADa > Tfno: +34 954 51 75 77 / +34 661 91 27 26 > Fax: +34 954 51 64 73 > www.emergya.es > --=20 J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona Consultor Externo Emergya Consultor=C3=ADa Tfno: +34 954 51 75 77 / +34 661 91 27 26 Fax: +34 954 51 64 73 www.emergya.es --001a113a9ba805b28b04fa735b65 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Sorry for the mistake, I mean "user.d" rather tn= an "user.db".<div>Thanks</div></div><div class=3D"gmail_extra"><b= r><br><div class=3D"gmail_quote">2014-05-28 11:36 GMT+02:00 Jos=C3=A9 F=C3= =A9lix Onta=C3=B1on <span dir=3D"ltr"><<a href=3D"mailto:fontanon@emergy= a.com" target=3D"_blank">[email protected]</a>></span>:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi,=C2=A0<div><br></div><di= v>As an alternative approach, I tried to implement per-user lockdown polici= es playing with user-space locals dconf-dbs.</div> <div>I'm afraid the following isn't working too:</div> <div><br></div><div><div style=3D"font-family:arial,sans-serif;font-size:13= px">>>> /etc/dconf/profile/user</div><div style=3D"font-family:ari= al,sans-serif;font-size:13px"><div>user-db:user</div><div><br></div><div>&g= t;>> ~/.config/dconf/user.db/user.key<br> </div><div>[org.gnome.desktop.lockdown]</div><div>disable-log-out=3D'tr= ue'</div><div><br></div><div><div>>>> ~/.config/dconf/user.db/= locks/disable-log-out.lock</div><div>/org/gnome/desktop/lockdown/disable-lo= g-out</div> </div><div class=3D""><div><br></div><div>Then run dconf update and restart= desktop session.<br></div><div><br></div></div><div class=3D""><div>Any cl= arification would be welcomed.=C2=A0</div></div><div>Thanks in advance.</di= v><div> <div></div></div></div></div> </div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">2014-05= -23 12:46 GMT+02:00 Jos=C3=A9 F=C3=A9lix Onta=C3=B1on <span dir=3D"ltr"><= ;<a href=3D"mailto:[email protected]" target=3D"_blank">fontanon@emergya= .com</a>></span>:<div> <div class=3D"h5"><br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div>Hi,=C2=A0</div><div><b= r></div><div>First, I don't know which is the right mailing list to pos= t the following question. Otherwise, please tell me where to do.</div> <div>Sorry for crossposting.</div><div><br> </div><div>After following the instructions given by the official documenta= tion, I managed to set system-wide mandatory settings with dconf, but I'= ;ve serious doubt whether is possible to create a per-user schema of mandat= ory settings with dconf.</div> <div><br></div><div><a href=3D"https://wiki.gnome.org/action/show/Projects/= dconf/SystemAdministrators" target=3D"_blank">https://wiki.gnome.org/action= /show/Projects/dconf/SystemAdministrators</a><br></div><div><br></div><div> So, the question: is it dconf prepared for configuring mandatory user-level= lockdown policies? I mean, so once a setting is configured, the user would= n't have the chance to modify it.</div> <div><br></div><div>Below two examples of configuration used: (1) a success= ful conf. for locking down the desktop-background system-wide (no local use= r could be able to change it), and (2) an unsuccessful try of having differ= ent lockdown policies for two different users.</div> <div><br></div><div>Any clarification would be welcomed.</div><div><br></di= v><div>Works! --- Example 1: locking down desktop-background system-wide --= -</div><div><br></div><div>>>> /etc/dconf/profile/user</div><div> <div>user-db:user</div><div>system-db:local</div><div><br></div></div><div>= >>>=C2=A0/etc/dconf/db/local.d/locks</div><div><div>/org/gnome/des= ktop/background/picture-uri</div></div><div><br></div><div>Then run dconf u= pdate and restart desktop session.</div> <div><br></div><div>--------------------</div><div><br></div><div>Not worki= ng :( --- Example 2: locking down desktop-background to test1 user, locking= down disable-log-out to test2 user ---<br></div><div><br></div><div><div> >>> /etc/dconf/profile/test1</div><div><div>user-db:user</div><div= >system-db:test1</div><div><div><br></div><div>>>> /etc/dconf/prof= ile/test2</div><div><div>user-db:user</div><div>system-db:test2</div></div> </div></div></div><div><br></div><div><div>>>>=C2=A0/etc/dconf/db/= test1.d/locks</div><div>/org/gnome/desktop/background/picture-uri</div></di= v><div><br></div><div><div>>>>=C2=A0/etc/dconf/db/test2.d/locks</d= iv><div> /org/gnome/desktop/lockdown/disable-log-out</div></div><div><br></div><div>= <div>Then run dconf update, ensure test1 and test2 has defined the DCONF_PR= OFILE env variable with their username, and restart desktop session.</div> <span><font color=3D"#888888"> </font></span></div><span><font color=3D"#888888"><div><br>-- <br><div dir= =3D"ltr">J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona<br>Consultor Externo<br><b= r>Emergya Consultor=C3=ADa <br>Tfno: <a href=3D"tel:%2B34%20954%2051%2075%2= 077" value=3D"+34954517577" target=3D"_blank">+34 954 51 75 77</a> / <a hre= f=3D"tel:%2B34%20661%2091%2027%2026" value=3D"+34661912726" target=3D"_blan= k">+34 661 91 27 26</a><br> Fax: <a href=3D"tel:%2B34%20954%2051%2064%2073" value=3D"+34954516473" targ= et=3D"_blank">+34 954 51 64 73</a><br><a href=3D"http://www.emergya.es" tar= get=3D"_blank">www.emergya.es</a></div> </div></font></span></div> </blockquote></div></div></div><div><div class=3D"h5"><br><br clear=3D"all"= ><div><br></div>-- <br><div dir=3D"ltr">J. F=C3=A9lix Onta=C3=B1=C3=B3n Car= mona<br>Consultor Externo<br><br>Emergya Consultor=C3=ADa <br>Tfno: <a href= =3D"tel:%2B34%20954%2051%2075%2077" value=3D"+34954517577" target=3D"_blank= ">+34 954 51 75 77</a> / <a href=3D"tel:%2B34%20661%2091%2027%2026" value= =3D"+34661912726" target=3D"_blank">+34 661 91 27 26</a><br> Fax: <a href=3D"tel:%2B34%20954%2051%2064%2073" value=3D"+34954516473" targ= et=3D"_blank">+34 954 51 64 73</a><br> <a href=3D"http://www.emergya.es" target=3D"_blank">www.emergya.es</a></div= > </div></div></div> </blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div dir=3D"= ltr">J. F=C3=A9lix Onta=C3=B1=C3=B3n Carmona<br>Consultor Externo<br><br>Em= ergya Consultor=C3=ADa <br>Tfno: +34 954 51 75 77 / +34 661 91 27 26<br>Fax= : +34 954 51 64 73<br> <a href=3D"http://www.emergya.es" target=3D"_blank">www.emergya.es</a></div= > </div> --001a113a9ba805b28b04fa735b65-- --===============8560918593678226789== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ gconf-list mailing list [email protected] https://mail.gnome.org/mailman/listinfo/gconf-list --===============8560918593678226789==--