[opensuse-kde] Advertising KDE kiosk mode
Hi all, Ludwig had mentioned that KDE has a working Kiosk mode, which locks down the desktop ie disable certain configuration options for users. Are any of you familiar with this? I noticed that it is not in the official repository. I see there is a configuration listed at https://userbase.kde.org/KDE_System_Administration/Kiosk/Introduction Would any of you be willing to add some more insight to this for an article on news.opensuse.org? Would this package work with Plasma 5? v/r Doug -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
Op 21-06-17 om 14:29 schreef ddemaio:
Hi all,
Ludwig had mentioned that KDE has a working Kiosk mode, which locks down the desktop ie disable certain configuration options for users.
Are any of you familiar with this? I noticed that it is not in the official repository. I see there is a configuration listed at https://userbase.kde.org/KDE_System_Administration/Kiosk/Introduction
Would any of you be willing to add some more insight to this for an article on news.opensuse.org?
Would this package work with Plasma 5?
v/r
Doug
Sorry, I don't have time for an article, but I have played with it. It is not a package. It works by editing configuration files and have them at the right place. In openSUSE you need to take care that they are not saved in the same location as the branding files (see [1]. I remember that there was some kind of GUI for this in development. Don't know the status of it. Cor [1] https://bugzilla.opensuse.org/show_bug.cgi?id=1000031 -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
Am Mittwoch, 21. Juni 2017, 14:53:11 schrieb Cor Blom:
I remember that there was some kind of GUI for this in development. Don't know the status of it.
It's called "confine", but hasn't got released yet. I'm not sure of the current status as well, or if it is going to be developed further, but the source code is here: https://cgit.kde.org/confine.git/tree/?h=gilbert I have built a package here if anyone wants to test it: http://software.opensuse.org//download.html?project=home%3Awolfi323%3Abranches%3AKDE%3AExtra&package=confine (if it works, I may submit it to KDE:Extra...) And according to the system config places that have been mentioned, it's not just /etc/xdg/kdeglobals (which will be overwritten by updates in openSUSE, because we have our default settings in there): *** Order of propogation is: ~/.config/myAppConfigrc (i.e dolphinrc) ~/.config/kdeglobals /etc/xdg/kdeglobals ~/.config/system.kdeglobals /etc/xdg/system.kdeglobals /etc/kde5rc Config loading will fallball from top to bottom. If an entry is not in the a file, it will try the one below Immutability overrides (the [$i] part) goes from bottom to top. So /etc/kde5rc has the most "power". *** Taken from https://mail.kde.org/pipermail/enterprise/2016-May/000010.html, which I mentioned in Cor Blom's bug report... IOW, put your system-wide settings into /etc/kde5rc or /etc/xdg/system.kdeglobals, and updates won't change it. Regarding the original question: Sorry, I won't write an article either, as I never used this. I just tried certain things from time to time when a user asked. (and I can confirm that it works in KF5 too...) Kind Regards, Wolfgang -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
On 21/06/17 21:47, Wolfgang Bauer wrote:
Am Mittwoch, 21. Juni 2017, 14:53:11 schrieb Cor Blom:
I remember that there was some kind of GUI for this in development. Don't know the status of it.
It's called "confine", but hasn't got released yet.
I'm not sure of the current status as well, or if it is going to be developed further, but the source code is here: https://cgit.kde.org/confine.git/tree/?h=gilbert
I have built a package here if anyone wants to test it: http://software.opensuse.org//download.html?project=home%3Awolfi323%3Abranches%3AKDE%3AExtra&package=confine (if it works, I may submit it to KDE:Extra...)
And according to the system config places that have been mentioned, it's not just /etc/xdg/kdeglobals (which will be overwritten by updates in openSUSE, because we have our default settings in there): *** Order of propogation is: ~/.config/myAppConfigrc (i.e dolphinrc) ~/.config/kdeglobals /etc/xdg/kdeglobals ~/.config/system.kdeglobals /etc/xdg/system.kdeglobals /etc/kde5rc
Also, at least in KDE3/KDE4 it was possible to set more paths in the KDEDIRS environment variable where config files were looked for. This allowed to set different kiosk settings for different persons in the same computer (for example, for persons in different departments in a company who have different restrictions). I'm not sure if that's also available in kf5 since the config files were moved from ~/.kde to ~/.config so maybe the environment variable for this changed from KDEDIRS to XDG_CONFIG_DIRS. -- Antonio Larrosa -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
Am Dienstag, 27. Juni 2017, 10:08:40 CEST schrieb Antonio Larrosa:
I'm not sure if that's also available in kf5 since the config files were moved from ~/.kde to ~/.config so maybe the environment variable for this changed from KDEDIRS to XDG_CONFIG_DIRS.
Yes, the config files are looked for in the paths specified by $XDG_CONFIG_DIRS (/etc/xdg/ is just the default). You still can add other directories to be searched for config files to $XDG_CONFIG_DIRS as well, or completely change it. Kind Regards, Wolfgang -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
In data mercoledì 21 giugno 2017 14:29:47 CEST, ddemaio ha scritto: Hello Doug,
Ludwig had mentioned that KDE has a working Kiosk mode, which locks down the desktop ie disable certain configuration options for users.
Yes, currently it does not have a User Interface (read: needs adjustments at the configuration file level), but it's pretty extensive in the amount of stuff that can be locked down. It is worth mentioning that the latest Plasma release cycles added a lot of kiosk functionality, also due to input from realities using Plasma in production. Actually, this framework is very old: it initial inception is from the KDE 3 days (I remember setting it up for someone as well). The only difference is that KDE 3 used to have a GUI for it ("kiosktool").
Are any of you familiar with this? I noticed that it is not in the
It is part of the standard KDE Frameworks 5 libraries (specifically the KConfig framework) so it's at the disposal of anyone who taps in these features, and installed by default with Plasma (it needs it). Basically it allows to forbid: - Specific configuration changes (Plasma widgets, wallpaper, etc...), which can be set as "immutable" and can't be overridden (think: corporate desktops for example) - Specific *actions* used by the software. For example, with the right configuration, opening files would be disallowed, or you could disable user session starting and switching. - Specific configuration modules (in System Settings): for example, one could disallow the display (and use) of the Notifications control panel, to keep notifications at defaults - User Interface elements: the "show password" button (the "eye" next to the line edits) can be disabled through a specific restriction All of this can be done by changing a system-wide configuration file (/etc/xdg/ kdeglobals). For example, to disable user switching and new session starting, we would put in /etc/xdg/kdeglobals: [KDE Action Restrictions][$i] switch_user=false start_new_session=false (NOTE: I'm going from memory wrt the file config location)
Would this package work with Plasma 5?
It does. In fact IIRC kiosk always worked from the 3.x days. More capabilities have been added recently. -- Luca Beltrame - KDE Forums team KDE Science supporter GPG key ID: A29D259B
On mercredi, 21 juin 2017 14.55:28 h CEST Luca Beltrame wrote:
In data mercoledì 21 giugno 2017 14:29:47 CEST, ddemaio ha scritto:
Hello Doug,
Ludwig had mentioned that KDE has a working Kiosk mode, which locks down the desktop ie disable certain configuration options for users.
Yes, currently it does not have a User Interface (read: needs adjustments at the configuration file level), but it's pretty extensive in the amount of stuff that can be locked down. It is worth mentioning that the latest Plasma release cycles added a lot of kiosk functionality, also due to input from realities using Plasma in production.
Actually, this framework is very old: it initial inception is from the KDE 3 days (I remember setting it up for someone as well). The only difference is that KDE 3 used to have a GUI for it ("kiosktool").
Are any of you familiar with this? I noticed that it is not in the
It is part of the standard KDE Frameworks 5 libraries (specifically the KConfig framework) so it's at the disposal of anyone who taps in these features, and installed by default with Plasma (it needs it). ....
It does. In fact IIRC kiosk always worked from the 3.x days. More capabilities have been added recently.
A number of discussions and tricks were exchanged on http://mail.kde.org/pipermail/enterprise/ -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch Bareos Partner, openSUSE Member, fsfe fellowship GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
Great. Thank you for all the info. I'll see if I can put something together from all the info provided. v/r Doug On 06/21/2017 03:23 PM, Bruno Friedmann wrote:
On mercredi, 21 juin 2017 14.55:28 h CEST Luca Beltrame wrote:
In data mercoledì 21 giugno 2017 14:29:47 CEST, ddemaio ha scritto:
Hello Doug,
Ludwig had mentioned that KDE has a working Kiosk mode, which locks down the desktop ie disable certain configuration options for users. Yes, currently it does not have a User Interface (read: needs adjustments at the configuration file level), but it's pretty extensive in the amount of stuff that can be locked down. It is worth mentioning that the latest Plasma release cycles added a lot of kiosk functionality, also due to input from realities using Plasma in production.
Actually, this framework is very old: it initial inception is from the KDE 3 days (I remember setting it up for someone as well). The only difference is that KDE 3 used to have a GUI for it ("kiosktool").
Are any of you familiar with this? I noticed that it is not in the It is part of the standard KDE Frameworks 5 libraries (specifically the KConfig framework) so it's at the disposal of anyone who taps in these features, and installed by default with Plasma (it needs it). .... It does. In fact IIRC kiosk always worked from the 3.x days. More capabilities have been added recently. A number of discussions and tricks were exchanged on http://mail.kde.org/pipermail/enterprise/
-- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
participants (6)
-
Antonio Larrosa -
Bruno Friedmann -
Cor Blom -
ddemaio -
Luca Beltrame -
Wolfgang Bauer