guenther wrote: > The above covers Nautilus ways and manually creating .desktop files? > > Forgot to state we also have a patch for nautilus, e.g. when user double clicks on an item to launch it, if not in the allowed list it won't launch....etc.. > What about non-obvious ways to launch an app? Although often not > intended to run full featured UI apps, it can be abused to do so. > > * gnome-terminal (if in the allowed list) > Attempting to launch an application from the terminal... well to be honest if a user has terminal access, it's fairly likely they won't have a locked down desktop in operation, interesting idea though none the less. > * deskbar-applet > Just disallow use of the deskbar-applet completely, via disabled_applets. > * Mail Notification (see Commands section in the Properties) > * Evolution (a) custom command to connect to IMAP server > (b) mail Filters "Run Programm" and "Pipe to Program" condition > and action > This is not meant to be a complete lockdown solution, just a starting point for locking down menu items, however various other applications could use these keys to implement some lockdown specifics. > Just a few ideas that popped right into my head. I am sure there are > lots of others... > > I bet there are too :)
Matt _______________________________________________ desktop-devel-list mailing list [email protected] http://mail.gnome.org/mailman/listinfo/desktop-devel-list
