Re: Kiosk mode

[Marco Pesenti Gritti <marco gnome org>]

> How would this affect programs which are run out of the browser via a
> mime-type lookup?  One of the favorite ways we used to get around these
> types of lockouts in college was to just go to a URL such as
> http://blah.com/my/stuff/whatever.exe which would download and run the
> program, which was generally a registry editing program that let us
> remove the parameters that locked us out of the control panel and
> browser restrictions.  Something like this could be done for gnome I
> figure.  
> 
> Granted, smart people will eventually find a way to get around any sort
> of restrictions if they are peristant enough, but something like
> allow_command_execute or allow_command_execute_regex which you could put
> something like ^/usr/bin/(realplayer|eog|totem)$ to allow only those
> programs to be spawned from epi when browsing, or don't allow them at
> all.

This is probably something missing from Chris plan. I guess we need a
way to disable downloads. There is already a normal pref in cvs for
opening.

Marco