To restrict the applications that users can start, use the following keys:
/desktop/gnome/lockdown/restrict_application_launching
/desktop/gnome/lockdown/allowed_applications
To restrict the applications that users can start, set the /desktop/gnome/lockdown/restrict_application_launching key to true.
When you restrict the applications, the following changes occur in the user interface:
The Run Application item is removed from the following menus:
Main Menu
Actions submenu in the Add to Panel menu
Actions menu in the Menu Bar
applet
Any menu items that do not correspond to applications listed in the /desktop/gnome/lockdown/allowed_applications key are removed from the following menus:
Main Menu
Actions submenu in the Add to Panel menu
Launcher from menu submenu in the Add to Panel menu
Actions menu in the Menu Bar
applet
When users double-click on a launcher on a panel, on a drawer, or on the desktop, a warning dialog is displayed if the application is not listed in the /desktop/gnome/lockdown/allowed_applications key. The application is not started.
When users open a file whose MIME type is associated with an application that is not listed in the /desktop/gnome/lockdown/allowed_applications key, a warning dialog is displayed. The application is not started.
If particular commands are not listed in the /desktop/gnome/lockdown/allowed_applications key, the corresponding menu items are removed from menus, as shown in the following table:
Command |
Menu Item |
Menu |
---|---|---|
/usr/bin/gnome-search-tool |
Find Files |
Main Menu Actions menu in Add to Panel -> Actions |
/usr/bin/yelp |
Help |
Main Menu |
/usr/bin/gnome-panel-screenshot |
Screenshot |
Add to Panel -> Actions |