Re: Lockdown... Take 2

["Michael Britton Selvitelle" <mbs uky edu>]

I couldn't agree with this more. I think it's very important that we draw a clear line between what should be handled by the operating system and what should be mandated by Gnome.

The Gnome implementation should not restrict all execution of an individual binary, for example. In turn, what would be a better solution IMO would be a central application within Gnome that would, for example, in one fail swoop both remove the icon from Gnome panels/menus as well as prevent execution from a group of users at the OS level.

This type of framework would cover all grounds, such as 'users shouldn't see X app on their desktop,' as well as providing an elegant means to impose that 'users should never be able to execute by any means Y application.'

Britt

-----Original Message-----
From: Havoc Pennington <hp redhat com>
To: Rob Adams <readams readams net>
Date: Wed, 15 Oct 2003 00:33:58 -0400
Subject: Re: Lockdown... Take 2

I'm just having trouble envisioning that we will get "prevent executable
Foo from being run" properly implemented. It feels right to me that the
GNOME piece should be about removing UI for running Foo, not about
preventing Foo in general. That is, the GNOME piece should have to do
with .desktop files and menu items, not executables.

Havoc

_______________________________________________
desktop-devel-list mailing list
desktop-devel-list gnome org
http://mail.gnome.org/mailman/listinfo/desktop-devel-list