After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 394252 - Restricted Application Launching
Restricted Application Launching
Status: RESOLVED WONTFIX
Product: pessulus
Classification: Deprecated
Component: general
2.16.x
Other All
: Normal enhancement
: ---
Assigned To: Pessulus Maintainer(s)
Pessulus Maintainer(s)
gnome[unmaintained]
Depends on: 395887
Blocks:
 
 
Reported: 2007-01-08 15:06 UTC by Matt Keenan (IRC:MattMan)
Modified: 2013-01-15 22:43 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
Feature Request Patch (17.06 KB, patch)
2007-01-08 15:09 UTC, Matt Keenan (IRC:MattMan)
none Details | Review
Feature Request Patch (17.04 KB, patch)
2007-07-11 14:23 UTC, Matt Keenan (IRC:MattMan)
none Details | Review

Description Matt Keenan (IRC:MattMan) 2007-01-08 15:06:10 UTC
At Guadec last year in Villanova, one of the topics that came up from Luis's
talk
on what our customers want from Gnome was the ability to restrict the gnome
menus.


Here's the solution we've implemented for this exact purpose, simply involves
two new global desktop lockdown keys :

- desktop/gnome/lockdown/restrict_application_launching

  Boolean value, that simply states whether restricted application launching
  is switched on or not.


- desktop/gnome/lockdown/allowed_applications

  A list of string's containing full path's to applications that are allowed.
  e.g. /usr/local/bin/evince etc...


Four initial patches are required for this :

 - gnome-panel (DONE)- Check of restricted application launching is set to true
then :
   - hide items on menus whose application is not in the allowed list
   - hide launcher icons on panels whose application is not in the allowed list
   - Restrict creating of launchers by D'n'D whose application are not in the
allowed
     list.
   - Patch attached to bug : http://bugzilla.gnome.org/show_bug.cgi?id=394249

 - libgnome (DONE but needs updating) - provide default schema for two new
gconf keys
 - Pessulus (DONE) - Update to allow editing of new gconf keys.

 - Nautilus (DONE)
Comment 1 Matt Keenan (IRC:MattMan) 2007-01-08 15:09:16 UTC
Created attachment 79751 [details] [review]
Feature Request Patch

Patch to implement editing of two new proposed lockdown keys :
   restrict_application_launching
   allowed_applications
Comment 2 Vincent Untz 2007-01-09 08:08:06 UTC
An idea, from d-d-l thread:

> > Just disallow use of the deskbar-applet completely, via disabled_applets.                                                                 
>                                                                                                                                             
> So there is a third part involved the admin needs to take care of in                                                                        
> order to lock down anything...                                                                                                              
                                                                                                                                              
We can make things easier with pessulus: if this lockdown setting is                                                                          
enabled, then we can also automatically add deskbar-applet to                                                                                 
disabled_applets. 
Comment 3 Matt Keenan (IRC:MattMan) 2007-07-11 10:31:13 UTC
any hope of getting this into 2.20 ?
Comment 4 Matt Keenan (IRC:MattMan) 2007-07-11 14:23:59 UTC
Created attachment 91623 [details] [review]
Feature Request Patch

Updated Patch to apply to latest svn
Comment 5 Kjartan Maraas 2008-08-06 13:22:47 UTC
Is this going to happen?
Comment 6 Matt Keenan (IRC:MattMan) 2008-08-07 11:42:24 UTC
If this makes it into gnome-panel/nautilus/libgnome then the pessulus patch is
very easy to provide.
Comment 7 Christian Kirbach 2013-01-15 22:43:37 UTC
We are sorry, but pessulus will no longer be maintained due to lack of manpower. I am closing all remaining open bug reports. Pessulus is already closed down for new report submissions.

Apologies for the noise and any inconvenience caused by it.