Re: Per-user mandatory lockdown policies with dconf. Is it possible?

[José Félix Ontañon <fontanon emergya com>]

Sorry for the mistake, I mean "user.d" rather tnan "user.db".

Thanks

2014-05-28 11:36 GMT+02:00 José Félix Ontañon <fontanon emergya com>:

Hi, 

As an alternative approach, I tried to implement per-user lockdown policies playing with user-space locals dconf-dbs.

I'm afraid the following isn't working too:

>>> /etc/dconf/profile/user

user-db:user

>>> ~/.config/dconf/user.db/user.key

[org.gnome.desktop.lockdown]

disable-log-out='true'

>>> ~/.config/dconf/user.db/locks/disable-log-out.lock

/org/gnome/desktop/lockdown/disable-log-out

Then run dconf update and restart desktop session.

Any clarification would be welcomed. 

Thanks in advance.

2014-05-23 12:46 GMT+02:00 José Félix Ontañon <fontanon emergya com>:

Hi, 

First, I don't know which is the right mailing list to post the following question. Otherwise, please tell me where to do.

Sorry for crossposting.

After following the instructions given by the official documentation, I managed to set system-wide mandatory settings with dconf, but I've serious doubt whether is possible to create a per-user schema of mandatory settings with dconf.

https://wiki.gnome.org/action/show/Projects/dconf/SystemAdministrators

So, the question: is it dconf prepared for configuring mandatory user-level lockdown policies? I mean, so once a setting is configured, the user wouldn't have the chance to modify it.

Below two examples of configuration used: (1) a successful conf. for locking down the desktop-background system-wide (no local user could be able to change it), and (2) an unsuccessful try of having different lockdown policies for two different users.

Any clarification would be welcomed.

Works! --- Example 1: locking down desktop-background system-wide ---

>>> /etc/dconf/profile/user

user-db:user

system-db:local

>>> /etc/dconf/db/local.d/locks

/org/gnome/desktop/background/picture-uri

Then run dconf update and restart desktop session.

--------------------

Not working :( --- Example 2: locking down desktop-background to test1 user, locking down disable-log-out to test2 user ---

>>> /etc/dconf/profile/test1

user-db:user

system-db:test1

>>> /etc/dconf/profile/test2

user-db:user

system-db:test2

>>> /etc/dconf/db/test1.d/locks

/org/gnome/desktop/background/picture-uri

>>> /etc/dconf/db/test2.d/locks

/org/gnome/desktop/lockdown/disable-log-out

Then run dconf update, ensure test1 and test2 has defined the DCONF_PROFILE env variable with their username, and restart desktop session.

--

J. Félix Ontañón Carmona
Consultor Externo

Emergya Consultoría
Tfno: +34 954 51 75 77 / +34 661 91 27 26
Fax: +34 954 51 64 73
www.emergya.es

--

J. Félix Ontañón Carmona
Consultor Externo

Emergya Consultoría
Tfno: +34 954 51 75 77 / +34 661 91 27 26
Fax: +34 954 51 64 73
www.emergya.es

--

J. Félix Ontañón Carmona
Consultor Externo

Emergya Consultoría
Tfno: +34 954 51 75 77 / +34 661 91 27 26
Fax: +34 954 51 64 73
www.emergya.es