To restrict the applications that users can start, use the following keys:
/desktop/gnome/lockdown/restrict_application_launching
/desktop/gnome/lockdown/allowed_applications
To restrict the applications that users can start, set the /desktop/gnome/lockdown/restrict_application_launching key to true.
When you restrict the applications, the following changes occur in the user interface:
The Run Application item is removed from the following menus:
Main Menu
Actions submenu in the Add to Panel menu
Actions menu in the Menu Bar
panel application
Any menu items that do not correspond to applications listed in the /desktop/gnome/lockdown/allowed_applications key are removed from the following menus:
Main Menu
Actions submenu in the Add to Panel menu
Launcher from menu submenu in the Add to Panel menu
Actions menu in the Menu Bar
panel application
When users double-click on a launcher on a panel, on a drawer, or on the desktop, a warning dialog is displayed if the application is not listed in the /desktop/gnome/lockdown/allowed_applications key. The application is not started.
When users open a file whose MIME type is associated with an application that is not listed in the /desktop/gnome/lockdown/allowed_applications key, a warning dialog is displayed. The application is not started.
If particular commands are not listed in the /desktop/gnome/lockdown/allowed_applications key, the corresponding menu items are removed from menus, as shown in the following table:
Command |
Menu Item |
Menu |
---|---|---|
/usr/bin/gnome-search-tool |
Find Files |
Main Menu Actions menu in Add to Panel -> Actions |
/usr/bin/jds-help |
Help |
Main Menu |
/usr/bin/gnome-panel-screenshot |
Screenshot |
Add to Panel -> Actions |