Re: gnome-panel menu lockdown proposal

[Matt Keenan <Matt Keenan Sun COM>]

guenther wrote:
> The above covers Nautilus ways and manually creating .desktop files?
>
>   
Forgot to state we also have a patch for nautilus, e.g. when user double 
clicks on an item to
launch it, if not in the allowed list it won't launch....etc..
> What about non-obvious ways to launch an app? Although often not
> intended to run full featured UI apps, it can be abused to do so.
>
> * gnome-terminal (if in the allowed list)
>   
Attempting to launch an application from the terminal... well to be 
honest if a user
has terminal access, it's fairly likely they won't have a locked down 
desktop in operation,
interesting idea though none the less.
> * deskbar-applet
>   
Just disallow use of the deskbar-applet completely, via disabled_applets.
> * Mail Notification (see Commands section in the Properties)
> * Evolution  (a) custom command to connect to IMAP server
>   (b) mail Filters "Run Programm" and "Pipe to Program" condition
>   and action
>   
This is not meant to be a complete lockdown solution, just a starting 
point for locking
down menu items, however various other applications could use these keys 
to implement
some lockdown specifics.
> Just a few ideas that popped right into my head. I am sure there are
> lots of others...
>
>   
I bet there are too :)

Matt