Re: Lockdown stuff

[Malcolm Tredinnick <malcolm commsecure com au>]

On Wed, 2003-10-08 at 11:02, Malcolm Tredinnick wrote:
[...]
> > 4. GConf
> > 
> >      - Restrict users from accessing gconf database.
> > 
> >      New Keys :
> >          /desktop/gnome/lockdown/gconf/disable_gconf_tools_access    boolean
> > 
> >      If set then the user cannot run gconf-editor or gconftool-2.
> 
[...]
> This feels like the wrong approach. Isn't this exactly what the
> /etc/gconf/2/path file is meant to control. Settings that are not meant
> to be changed are put in a readonly file that is mentioned last in the
> path file. You can even remove $HOME/.gconf2/ from that file. All your
> other gconf comments look like they can already be handled by 'path' as
> well.

Substitute "mandatory file" and "mentioned first" in the appropriate
places. This was a not-enough-coffee-this-morning error. But you get the
idea.

Malcolm