Chapter 10 Disabling Features in the Java Desktop System

This chapter describes how to disable particular features of the Java Desktop System.

Introduction to Disabling Java Desktop System Features

The Java Desktop System includes features that you can use to restrict access to certain functions in the Java Desktop System. The disable features are useful in various situations where you want to restrict the actions that users can perform on a computer. For example, you might want to prevent command line operations on a computer that is for public use at a trade show. The disable features are also known as lockdown features.

You set GConf keys to disable features. For information about how to set GConf keys, see Chapter 1, Using GConf. You can also use the Configuration Editor application to set GConf keys in a user configuration source. For more information about the Configuration Editor application, see the online Help for Configuration Editor.

To Disable Lock Screen

To disable the lock screen function, set the /apps/panel/global/disable_lock_screen key to true.

When you disable the lock screen function, the following items are removed from the panels:

• Lock Screen menu item from the Main Menu.

• Lock menu item from the Add to Panel -> Actions menu. To open this menu, right-click on a vacant space on a panel, then choose Add to Panel -> Actions.

• Lock Screen menu item from the Actions menu in the Menu Bar panel application.

Also, any Lock Screen buttons on panels are disabled.

To Disable Log Out

To disable the log out function, set the /apps/panel/global/disable_log_out key to true.

When you disable the log out function, the following items are removed from the panels:

• Log Out user menu item from the Main Menu.

• Log Out menu item from the Add to Panel -> Actions menu.

• Log Out user menu item from the Actions menu in the Menu Bar panel application.

Also, any Log Out buttons on panels are disabled.

To Disable Force Quit Operations

To disable the force quit function, set the /apps/panel/global/disable_force_quit key to true.

When you disable the force quit function, the Force Quit menu item is removed from the Add to Panel -> Actions menu. Also, any Force Quit buttons on panels are disabled.

To Disable Command Line Operations

To disable operations from a command line, set the /desktop/gnome/lockdown/disable_command_line key to true.

When you disable command line operations, the following items are removed from the panels:

• Any menu items that contain the following commands:

  • Terminal command, that is /usr/bin/gnome-terminal

  • /usr/bin/xterm

  • /usr/bin/setterm

  The items are removed from the following menus:

  • Main Menu

  • Add to Panel -> Launcher from menu

• Command Line panel application from the Main Menu and the Add to Panel -> Utility menu.

• Run Application menu item, from the following menus:

  • Main Menu

  • Actions submenu in the Add to Panel menu

  • Actions menu in the Menu Bar panel application

To Disable Panel Configuration

To disable panel configuration, set the /apps/panel/global/locked_down key to true.

When you disable panel configuration, the following changes occur in the user interface:

• The following items are removed from the panel popup menu, and from the drawer popup menu:

  • Add to Panel

  • Delete This Panel

  • Properties

  • New Panel

• The following items are removed from the popup menus for panel objects:

  • Remove From Panel.

  • Lock.

  • Move.

  • The Properties menu item is removed from the launcher popup menu.

• The Main Menu popup menu is disabled.

• The launcher drag feature is disabled, so that users cannot drag launchers to, or from, panels.

• The panel drag feature is disabled, so that users cannot drag panels to new locations.

To Restrict Applications

To restrict the applications that users can start, use the following keys:

• /desktop/gnome/lockdown/restrict_application_launching

• /desktop/gnome/lockdown/allowed_applications

To restrict the applications that users can start, set the /desktop/gnome/lockdown/restrict_application_launching key to true.

When you restrict the applications, the following changes occur in the user interface:

• The Run Application item is removed from the following menus:

  • Main Menu

  • Actions submenu in the Add to Panel menu

  • Actions menu in the Menu Bar panel application

• Any menu items that do not correspond to applications listed in the /desktop/gnome/lockdown/allowed_applications key are removed from the following menus:

  • Main Menu

  • Actions submenu in the Add to Panel menu

  • Launcher from menu submenu in the Add to Panel menu

  • Actions menu in the Menu Bar panel application

• When users double-click on a launcher on a panel, on a drawer, or on the desktop, a warning dialog is displayed if the application is not listed in the /desktop/gnome/lockdown/allowed_applications key. The application is not started.

• When users open a file whose MIME type is associated with an application that is not listed in the /desktop/gnome/lockdown/allowed_applications key, a warning dialog is displayed. The application is not started.

• If particular commands are not listed in the /desktop/gnome/lockdown/allowed_applications key, the corresponding menu items are removed from menus, as shown in the following table:

  Command	Menu Item	Menu
  /usr/bin/gnome-search-tool	Find Files	Main Menu Actions menu in Menu Bar panel application Add to Panel -> Actions
  /usr/bin/jds-help	Help	Main Menu
  /usr/bin/gnome-panel-screenshot	Screenshot	Add to Panel -> Actions