[gnome-user-docs] Review lockdown-command-line

[Ekaterina Gerasimova <egerasimov src gnome org>]

commit 0bc0d69ac7067b5e1938c5bec04dea74f2de790f
Author: Ekaterina Gerasimova <kittykat3756 gmail com>
Date:   Wed Jun 18 13:49:11 2014 -0400

    Review lockdown-command-line

 system-admin-guide/C/lockdown-command-line.page    |  112 ++++++++++++++++++++
 .../C/lockdown-command-line.page.stub              |  107 -------------------
 system-admin-guide/Makefile.am                     |    9 +-
 3 files changed, 117 insertions(+), 111 deletions(-)
---
diff --git a/system-admin-guide/C/lockdown-command-line.page b/system-admin-guide/C/lockdown-command-line.page
new file mode 100644
index 0000000..c31808d
--- /dev/null
+++ b/system-admin-guide/C/lockdown-command-line.page
@@ -0,0 +1,112 @@
+<page xmlns="http://projectmallard.org/1.0/";
+      xmlns:its="http://www.w3.org/2005/11/its";
+      type="topic" style="task"
+      id="lockdown-command-line">
+
+  <info>
+    <link type="guide" xref="software#management" />
+    <revision pkgversion="3.12" date="2014-06-18" status="review" />
+
+    <credit type="author copyright">
+      <name>Petr Kovar</name>
+      <email its:translate="no">pknbe volny cz</email>
+      <years>2014</years>
+    </credit>
+    <credit type="author copyright">
+      <name>Ekaterina Gerasimova</name>
+      <email its:translate="no">kittykat3756 gmail com</email>
+      <years>2014</years>
+    </credit>
+
+    <desc>Prevent users from accessing the command-line.</desc>
+  </info>
+
+  <title>Disable command-line access</title>
+
+  <p>You can prevent users from being able to access the command-line through
+  virtual terminals and terminal applications by in three areas:</p>
+
+  <list>
+    <item>
+      <p>Prevent users from accessing the
+      <keyseq><key>Alt</key><key>F2</key></keyseq> command prompt.</p>
+    </item>
+    <item>
+      <p>Disable dropping to a virtual terminal (VT).</p>
+    </item>
+    <item>
+      <p>Remove <app>Terminal</app> and all other terminal applications from
+      the <gui>Activities</gui> overview in GNOME Shell. You will also need to
+      prevent the user from installing a new terminal application.</p>
+      <comment>
+        <cite>Petr Kovar</cite>
+        <p>We have yet to cover removing a menu item in this guide. We don't
+        want system admins having to modify .desktop files as those could be
+        overwritten on system update.</p>
+      </comment>
+    </item>
+  </list>
+
+<section id="command-prompt">
+  <title>Disable the command prompt</title>
+
+  <steps>
+    <include href="dconf-profile-user.xml"
+      xpointer="xmlns(mal=http://projectmallard.org/1.0/)xpointer(/mal:page/mal:steps/mal:item)"
+      xmlns="http://www.w3.org/2001/XInclude"/>
+    <item>
+      <p>Create a <sys>local</sys> database for machine-wide settings in
+      <file>/etc/dconf/db/local.d/00-lockdown</file>:</p>
+      <code># Specify the dconf path
+[org/gnome/desktop/lockdown]
+
+# Disable the command prompt
+disable-command-line=true</code>
+    </item>
+    <item>
+      <p>Override the user's setting and prevent the user from changing it in
+      <file>/etc/dconf/db/local.d/locks/lockdown</file>:</p>
+      <code># List the keys used to configure lockdown
+/org/gnome/desktop/lockdown/disable-command-line</code>
+    </item>
+    <item>
+      <p>Update the system databases:</p>
+      <screen><output>$ </output><input>dconf update</input></screen>
+    </item>
+  </steps>
+</section>
+
+<section id="virtual-terminal">
+  <title>Disable dropping to a virtual terminal</title>
+
+  <p>Users can normally use the
+  <keyseq><key>Ctrl</key><key>Alt</key><key><var>function
+  key</var></key></keyseq> shortcuts (for example,
+  <keyseq><key>Ctrl</key><key>Alt</key><key>F2</key></keyseq>) to switch from
+  the GNOME desktop to a virtual terminal.</p>
+
+  <p>If the computer is running the <em>X Window System</em>, you can disable
+  access to all virtual terminals by adding a <code>DontVTSwitch</code> option
+  to the <code>Serverflags</code> section in the
+  <file>/etc/X11/xorg.conf.d</file> file.</p>
+
+  <steps>
+    <item>
+      <p>Create or edit an X configuration file in
+      <file>/etc/X11/xorg.conf.d</file>:</p>
+      <code>Section "Serverflags"
+
+Option "DontVTSwitch" "yes"
+
+EndSection</code>
+    </item>
+    <item>
+      <p><link xref="gdm-restart">Restart GDM</link> for the change to take
+      effect.</p>
+    </item>
+  </steps>
+
+</section>
+
+<!-- TODO: add section for removing applications from the Activities overview. -->
+</page>
diff --git a/system-admin-guide/Makefile.am b/system-admin-guide/Makefile.am
index eef42fd..aa64d70 100644
--- a/system-admin-guide/Makefile.am
+++ b/system-admin-guide/Makefile.am
@@ -2,10 +2,6 @@
 
 HELP_ID = system-admin-guide
 
-HELP_LINGUAS =
-
-HELP_MEDIA =
-
 HELP_FILES = \
        backgrounds-extra.page          \
        dconf-custom-defaults.page      \
@@ -26,6 +22,7 @@ HELP_FILES = \
        index.page                      \
        keyboard-layout.page            \
        legal.xml                       \
+       lockdown-command-line.page      \
        login.page                      \
        login-automatic.page            \
        login-banner.page               \
@@ -45,3 +42,7 @@ HELP_FILES = \
        servers-list.page               \
        user-session.page               \
        vpn-list.page
+
+HELP_MEDIA =
+
+HELP_LINGUAS =