You are not logged in.

1

Monday, January 19th 2009, 11:45pm

Lock Down Kicker Context Menu and Applet Context Menus

I have a machine that is running kde 3, which I have to administer, and it will be in use by people who are potentially untrusted. I want to lock down as much of the configurability of a given user account as I can, to prevent people from changing configuration stuff on me.

I've been able to figure out quite a bit so far, but one problem I'm having is that if I right click on the kicker, I get a context menu that has a "configure panel", which has all sorts of stuff that I don't want people to be able to access.

Also, there's the log-out/lock applet that I have visible, and right clicking allows users to configure the screen saver and session manager -- not cool!

Also, there are certain items in the task bar (specifically kpowersave and klipper that provide configuration stuff, that I want to lock down.

First off, is there any sort of global setting that allows me to block a user from configuring their account? Otherwise, is there any way to modify or block the context menu on kicker, or the applet context menus? And is there any way to block a program from the system tray (not just hide it, but block it all together)?

Thanks so much!

A.

2

Tuesday, January 20th 2009, 12:19am

RE: Lock Down Kicker Context Menu and Applet Context Menus

I have a machine that is running kde 3, which I have to administer, and it will be in use by people who are potentially untrusted. I want to lock down as much of the configurability of a given user account as I can, to prevent people from changing configuration stuff on me.

I've been able to figure out quite a bit so far, but one problem I'm having is that if I right click on the kicker, I get a context menu that has a "configure panel", which has all sorts of stuff that I don't want people to be able to access.

Also, there's the log-out/lock applet that I have visible, and right clicking allows users to configure the screen saver and session manager -- not cool!

Also, there are certain items in the task bar (specifically kpowersave and klipper that provide configuration stuff, that I want to lock down.

First off, is there any sort of global setting that allows me to block a user from configuring their account? Otherwise, is there any way to modify or block the context menu on kicker, or the applet context menus? And is there any way to block a program from the system tray (not just hide it, but block it all together)?

Thanks so much!

A.
I believe I have found my answer in the form of restricting the action/kicker_rmb action. This fixes the applets, too.

I still need to figure out the system tray stuff, though.