Brian Cameron wrote: > The GDM co-maintainers did not like the above proposal. They > disagreed strongly with the idea of including or excluding users > based on whether they have a face image defined. Remember the > face browser shows users who do not have a face image defined with > a generic "face" image. > > Instead, they propose the following: > > Add back the GDM Include and Exclude configuration options so that > the sysadmin can define which users should be included in the face > browser even if they have not previously logged in and which users > should be always excluded. This is how the old GDM also worked. > Will this satisfy the opt-in/opt-out requirements? > > Or do we also need the ability for opt-out to be a user preference so > that user's can opt-out of the face browser even if they do not have > the authority to modify the GDM Include/Exclude configuration options? > If so, can someone give a justification why users need the ability to > do this?
That would be nice but I think doing at least what the old GDM did would be better than the all or nothing situation that was originally proposed. > In my discussion with the upstream maintainers, we couldn't think of a use > case where it makes sense to allow users to opt-out of the face browser. > Each example we could think of seemed better managed by just having the > sysadmin control this via the Include/Exclude configuration options. What about because it is users personal wish not to have even their real name shown up because the systems are in a public area - even if the host admin has not disabled the face browser ? Consider Sun Rays in drop in centres. Remember that this information is going to be visible to anyone walking past the machine without them being a valid user. I'm happy enough with the proposal to bring back the admin level control. > If this is needed, then we could add a new field to the $HOME/.dmrc file > (e.g. ShowInFaceBrowser=true), which the user could change to false if they > no longer wish to show up in the face browser. That would be be very nice, but isn't dmrc a file controlled by a freedesktop.org spec ? Or is that just the .desktop files ? -- Darren J Moffat
