Re: Lockdown... Take 2

[Matt Keenan <Matt Keenan sun com>]

Having gconf keys here is cleaner in my view and as Alex says, they
are not intended as a complete secure solution just a means hiding
some options..

Andrew Sobala wrote:
> On Wed, 2003-10-15 at 10:35, Alexander Larsson wrote:
>
> > That said, even if one uses ACLS to do the actual lockdown, there is
> > some some use in keys like this. When in locked down mode we want to
> > avoid presenting the locked down things from the ui. Having "open
> > terminal" in the menu, but giving a "permission denied" dialog isn't
> > very nice. However, we need to point this out so people don't think
> > enabling the disable_terminal key makes their system safe.
>
>
> Are gconf keys absolutely necessary? Can't we check for exec permissions
> before showing the menu item, and simply not show it if it wouldn't
> work?


--
        __.--'\     \.__./     /'--.__
    _.-'       '.__.'    '.__.'       '-._
  .'       Matt Keenan (mattman)          '.
 /       Sun Microsystems Ireland           \
|                                            |
|   E-Mail : Matt Keenan Sun Com             |
|            mattman iol ie                  |
|                                            |
|  Irish Fantasy League Of American Football |
|           http://www.iflaf.com             |
|                                            |
|        Happy Hookers Golf Society          |
|   http://www.iol.ie/~mattman/golf/hhgs.htm |
|                                            |
|   Phone  : +353 1 8199251, Sun Ext : 19251 |
 \         .---.              .---.         /
  '._    .'     '.''.    .''.'     '.    _.'
     '-./            \  /            \.-'
                      ''