Re: [sabayon] On the topic of lockdown

[Alexander Larsson <alexl redhat com>]

On Fri, 2006-10-27 at 12:05 +0200, Rob Bradford wrote:
> On Fri, 2006-10-27 at 10:31 +0200, Alexander Larsson wrote:
> 
> > We still need lockdown keys for some things, as they are not
> > implementable by just having some preferences not being writable. For
> > instance, you couldn't lock down shell access by making some config
> > setting unchangable.
> > 
> 
> Exactly this was the point I was trying to put across. (And sadly
> failing to do successfully). The approach I want to take is that setting
> this lockdown attribute *both* sets they key *and* makes in mandatory in
> the cases where there is an explicit 'meta' key.
> 
> This means we can then go ahead and provide more lockdown features
> without having to add more and more keys.
> 
> Do you think this is an acceptable change to make for 2.17/2.18.

Uhm, I don't understand what you mean? What change? We already have
specific lockdown keys like 
/desktop/gnome/lockdown/disable_command_line, and supporting that is not
a change.

Do you want to add specific lockdown keys for things that already have a
gconf key that could be made non-writable I don't think that makes any
sense. That would basically mean duplicating each setting in gconf.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                            Red Hat, Inc 
                   alexl redhat com    alla lysator liu se 
He's a witless gay cowboy haunted by memories of 'Nam. She's a chain-smoking 
antique-collecting schoolgirl descended from a line of powerful witches. They 
fight crime!