Hi,
I am not sure I am writing to the right list, but this is the only place where I found anything about the aforementioned dialog.
I am trying to create a lockdown environment using Trinity Desktop and Ubuntu 12.04LTS. It is all good and fine except that after the first login if I press CTRL+ALT+DEL the dialog appears and makes logging of, restarting the machine possible, which are some things I want to deny users.
However if I log out and log in again the same key combination does nothing. I tried comparing configurations before after without success. I added new users test1, test2 and after reboot logged in using test1 then test2, skipped the wizard both times. In case of test1 the dialog appeared upon CTRL+ALT+DEL in case of test2 it did not. Even for the user with lockdown profile the same rule applies, after first login dialog appears, second and subsequent(tried 4 times) logins no dialog.
Is this a bug or am I missing something? Is there a way to turn this thing off totally?
Thank you Frigyes Pratser
/etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=12.04 DISTRIB_CODENAME=precise DISTRIB_DESCRIPTION="Ubuntu 12.04 LTS"
dpkg -l | grep trinity ii ark-trinity 4:3.5.13-1ubuntu0+ax2~precise graphical archiving tool for Trinity ii arts-trinity 4:3.5.13-1ubuntu0+ax2~precise sound system from the official KDE release ii gtk-qt-engine-trinity 4:3.5.13-1ubuntu0+ax2~precise theme engine using Qt for GTK+ 2.x and Trinity ii hal-trinity 0.5.14-8 Hardware Abstraction Layer [Trinity] ii kappfinder-trinity 4:3.5.13-1ubuntu0+ax3~precise non-KDE application finder for KDE ii kate-trinity 4:3.5.13-1ubuntu0+ax3~precise advanced text editor for KDE ii kcontrol-trinity 4:3.5.13-1ubuntu0+ax3~precise control center for KDE ii kcron-trinity 4:3.5.13-1ubuntu0+ax1~precise the Trinity crontab editor ii kdbusnotification-trinity 4:3.5.13-1ubuntu0+ax2~precise a DBUS notification service [Trinity] ii kde-style-qtcurve-trinity 4:3.5.13-1ubuntu0+ax1~precise This is a set of widget styles for Trinity based apps ii kde-systemsettings-trinity 4:3.5.13-1ubuntu0+ax1~precise easy to use control centre for TDE ii kdeadmin-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax1~precise Trinity file metainfo plugins for deb and rpm files ii kdebase-data-trinity 4:3.5.13-1ubuntu0+ax3~precise shared data files for the KDE base module ii kdebase-kio-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise core I/O slaves for KDE ii kdebase-runtime-data-common-trinity 4:3.5.13-1ubuntu0+ax3~precise Shared common files for Trinity and KDE4 ii kdebase-trinity 4:3.5.13-1ubuntu0+ax3~precise base components from the official KDE release ii kdebase-trinity-bin 4:3.5.13-1ubuntu0+ax3~precise core binaries for the KDE base module ii kdegraphics-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax2~precise KDE metainfo plugins for graphic files ii kdelibs-data-trinity 4:3.5.13-1ubuntu0+ax5~precise core shared data for all TDE applications ii kdelibs4c2a-trinity 4:3.5.13-1ubuntu0+ax5~precise core libraries and binaries for all TDE applications ii kdemultimedia-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise au/avi/m3u/mp3/ogg/wav plugins for kfile ii kdemultimedia-kio-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise enables the browsing of audio CDs under Konqueror ii kdenetwork-filesharing-trinity 4:3.5.13-1ubuntu0+ax2~precise network filesharing configuration module for Trinity ii kdenetwork-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax2~precise torrent metainfo plugin for Trinity ii kdepasswd-trinity 4:3.5.13-1ubuntu0+ax3~precise password changer for KDE ii kdeprint-trinity 4:3.5.13-1ubuntu0+ax3~precise print system for KDE ii kdesktop-trinity 4:3.5.13-1ubuntu0+ax3~precise miscellaneous binaries and files for the KDE desktop ii kdm-trinity 4:3.5.13-1ubuntu0+ax3~precise X display manager for KDE ii kdnssd-trinity 4:3.5.13-1ubuntu0+ax2~precise Zeroconf support for KDE ii kfind-trinity 4:3.5.13-1ubuntu0+ax3~precise file-find utility for KDE ii kghostview-trinity 4:3.5.13-1ubuntu0+ax2~precise PostScript viewer for Trinity ii kgtk-qt3-trinity 4:3.5.13-1ubuntu0+ax0~precise Use KDE dialogs in Gtk apps ii khelpcenter-trinity 4:3.5.13-1ubuntu0+ax3~precise help center for KDE ii kicker-trinity 4:3.5.13-1ubuntu0+ax3~precise desktop panel for KDE ii kio-locate-trinity 4:3.5.13-1ubuntu0+ax1~precise kio-slave for the locate command [Trinity] ii klipper-trinity 4:3.5.13-1ubuntu0+ax3~precise clipboard utility for Trinity ii kmenuedit-trinity 4:3.5.13-1ubuntu0+ax3~precise menu editor for KDE ii kmix-trinity 4:3.5.13-1ubuntu0+ax3~precise sound mixer applet for Trinity ii knetworkconf-trinity 4:3.5.13-1ubuntu0+ax1~precise Trinity network configuration tool ii konq-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise plugins for Konqueror, the Trinity file/web/doc browser ii konqueror-nsplugins-trinity 4:3.5.13-1ubuntu0+ax3~precise Netscape plugin support for Konqueror ii konqueror-trinity 4:3.5.13-1ubuntu0+ax3~precise KDE's advanced file manager, web browser and document viewer ii konsole-trinity 4:3.5.13-1ubuntu0+ax3~precise X terminal emulator for KDE ii kpager-trinity 4:3.5.13-1ubuntu0+ax3~precise desktop pager for KDE ii kpdf-trinity 4:3.5.13-1ubuntu0+ax2~precise PDF viewer for Trinity ii kpersonalizer-trinity 4:3.5.13-1ubuntu0+ax3~precise installation personalizer for KDE ii ksmserver-trinity 4:3.5.13-1ubuntu0+ax3~precise session manager for KDE ii ksnapshot-trinity 4:3.5.13-1ubuntu0+ax2~precise screenshot utility for Trinity ii ksplash-engine-moodin-trinity 4:3.5.13-1ubuntu0+ax1~precise fading splash screen engine for Trinity ii ksplash-trinity 4:3.5.13-1ubuntu0+ax3~precise the KDE splash screen ii ksvg-trinity 4:3.5.13-1ubuntu0+ax2~precise SVG viewer for Trinity ii ksysguard-trinity 4:3.5.13-1ubuntu0+ax3~precise system guard for KDE ii ksysguardd-trinity 4:3.5.13-1ubuntu0+ax3~precise system guard daemon for KDE ii ksystemlog-trinity 4:3.5.13-1ubuntu0+ax1~precise system log viewer tool for Trinity ii ktip-trinity 4:3.5.13-1ubuntu0+ax3~precise useful tips for KDE ii kubuntu-default-settings-trinity 1:10.10-9~lucid Default settings and artwork for the Debian KDE3 desktop ii kubuntu-desktop-trinity 1:78 Kubuntu desktop system, TDE version ii kwin-style-crystal-trinity 4:3.5.13-1ubuntu0+ax1~precise semi transparant window decoration for Trinity ii kwin-trinity 4:3.5.13-1ubuntu0+ax3~precise the KDE window manager ii libarts1-akode-trinity 4:3.5.13-1ubuntu0+ax3~precise akode plugin for aRts ii libarts1c2a-trinity 4:3.5.13-1ubuntu0+ax2~precise aRts sound system core components ii libartsc0-trinity 4:3.5.13-1ubuntu0+ax2~precise aRts sound system C support library ii libkcddb1-trinity 4:3.5.13-1ubuntu0+ax3~precise CDDB library for Trinity ii libkonq4-trinity 4:3.5.13-1ubuntu0+ax3~precise core libraries for Konqueror ii libsmokeqt1-trinity 4:3.5.13-1ubuntu0+ax2~precise SMOKE Binding Library to Qt ii sudo-trinity 1.9 TDE sudo
Dne po 24. června 2013 frigo napsal(a):
Hi,
I am not sure I am writing to the right list, but this is the only place where I found anything about the aforementioned dialog.
I am trying to create a lockdown environment using Trinity Desktop and Ubuntu 12.04LTS. It is all good and fine except that after the first login if I press CTRL+ALT+DEL the dialog appears and makes logging of, restarting the machine possible, which are some things I want to deny users.
However if I log out and log in again the same key combination does nothing. I tried comparing configurations before after without success. I added new users test1, test2 and after reboot logged in using test1 then test2, skipped the wizard both times. In case of test1 the dialog appeared upon CTRL+ALT+DEL in case of test2 it did not. Even for the user with lockdown profile the same rule applies, after first login dialog appears, second and subsequent(tried 4 times) logins no dialog.
Is this a bug or am I missing something? Is there a way to turn this thing off totally?
Thank you Frigyes Pratser
If you want to completely disable SAK in /etc/trinity/kdm/kdmrc enable line UseSAK=false.
Note: For user queries such as this would be the correct mailing-list trinity-users.
Slavek --
Hi,
I am not sure I am writing to the right list, but this is the only place where I found anything about the aforementioned dialog.
I am trying to create a lockdown environment using Trinity Desktop and Ubuntu 12.04LTS. It is all good and fine except that after the first login if I press CTRL+ALT+DEL the dialog appears and makes logging of, restarting the machine possible, which are some things I want to deny users.
However if I log out and log in again the same key combination does nothing. I tried comparing configurations before after without success. I added new users test1, test2 and after reboot logged in using test1 then test2, skipped the wizard both times. In case of test1 the dialog appeared upon CTRL+ALT+DEL in case of test2 it did not. Even for the user with lockdown profile the same rule applies, after first login dialog appears, second and subsequent(tried 4 times) logins no dialog.
Is this a bug or am I missing something? Is there a way to turn this thing off totally?
3.5.13.1 has known problems with the Secure Desktop Area dialog. You can disable it completely if you disable all SAK (Ctrl+Alt+Del) capability on the system, though I don't know if this would be an option for your environment. The development version of TDE provides a checkbox to disable SAK functionality in the TDM control center module, though I don't remember if that checkbox is available on 3.5.13.1 or not.
Note that the Secure Desktop Area dialog uses normal DCOP calls for shutdown/restart, so if those actions are allowed from the Secure Desktop Area dialog, then the user would likely be able to initiate those same actions from a terminal with DCOP (or possibly even with kdcop if available).
Hope this helps!
Tim
On Monday 24 of June 2013 21:09:01 Timothy Pearson wrote:
The development version of TDE provides a checkbox to disable SAK functionality in the TDM control center module, though I don't remember if that checkbox is available on 3.5.13.1 or not.
In 3.5.13.1 checkbox is not available, but will be in 3.5.13.2, which should be available soon.
Slavek --
Hi!
Thank you for your answers! Next time I am going to use the other list, but hope it is OK to continue this thread here, to keep the information together.
I tried to enable the line "UseSAK=false" in "/etc/trinity/kdm/kdmrc" under section "[X-*-Greeter]" to no avail. After reboot and the first login the dialog appears just like before.
"The development version of TDE provides a checkbox to disable SAK functionality in the TDM control center module, though I don't remember if that checkbox is available on 3.5.13.1 or not."
Just to be sure, the functionality of this checkbox is exactly the same like enabling the "UseSAK" line in the config?
Disabling the DCOP calls would be an option, but one I want to avoid. The lockdown environment allows the few users who can access it only to start some pre-defined programs, so messing with dcop in a terminal is not a problem. My biggest concern is that the dialog hides all other application windows and I have to make sure that some of the applications are always visible. The users could be told to never push CTRL+ALT+DEL, but I'd rather control this behavior just to be on the safe side.
Thank you Frigyes
On Mon, Jun 24, 2013 at 9:58 PM, Slávek Banko slavek.banko@axis.cz wrote:
On Monday 24 of June 2013 21:09:01 Timothy Pearson wrote:
The development version of TDE provides a checkbox to disable SAK functionality in the TDM control center module, though I
don't
remember if that checkbox is available on 3.5.13.1 or not.
In 3.5.13.1 checkbox is not available, but will be in 3.5.13.2, which should be available soon.
Slavek
To unsubscribe, e-mail: trinity-devel-unsubscribe@lists.pearsoncomputing.net For additional commands, e-mail: trinity-devel-help@lists.pearsoncomputing.net Read list messages on the web archive: http://trinity-devel.pearsoncomputing.net/ Please remember not to top-post: http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
Hello!
I got to the point where I have to solve this problem and found out that the suggested "UseSAK=false" solution works. I wanted to enable auto login and changed my /etc/trinity/kdm/kdmrc but my changes just didn't seem to work. Last time it didn't cross my mind to check if changes in /etc/trinity/kdm/kdmrc are effective or not, I just assumed they are. Then I saw a file named /etc/trinity/kdm/kdmdistrc and after deleting it all my changes worked.
According to http://git.trinitydesktop.org/cgit/tdebase/tree/kcontrol/kdm/main.cpp?id=2d8... kdmdistrc has priority over kdmrc.
So as far as my knowledge goes, as long as kdmdistrc is present no options in kdmrc are read, so UseSAK never had a chance to be effective.
Is my assumption right and is kdmdistrc documented somewhere?
Cheers Frigyes Pratser
On Tue, Jun 25, 2013 at 9:19 AM, frigo pratser.frigyes@gmail.com wrote:
Hi!
Thank you for your answers! Next time I am going to use the other list, but hope it is OK to continue this thread here, to keep the information together.
I tried to enable the line "UseSAK=false" in "/etc/trinity/kdm/kdmrc" under section "[X-*-Greeter]" to no avail. After reboot and the first login the dialog appears just like before.
"The development version of TDE provides a checkbox to disable SAK functionality in the TDM control center module, though I don't remember if that checkbox is available on 3.5.13.1 or not."
Just to be sure, the functionality of this checkbox is exactly the same like enabling the "UseSAK" line in the config?
Disabling the DCOP calls would be an option, but one I want to avoid. The lockdown environment allows the few users who can access it only to start some pre-defined programs, so messing with dcop in a terminal is not a problem. My biggest concern is that the dialog hides all other application windows and I have to make sure that some of the applications are always visible. The users could be told to never push CTRL+ALT+DEL, but I'd rather control this behavior just to be on the safe side.
Thank you Frigyes
On Mon, Jun 24, 2013 at 9:58 PM, Slávek Banko slavek.banko@axis.czwrote:
On Monday 24 of June 2013 21:09:01 Timothy Pearson wrote:
The development version of TDE provides a checkbox to disable SAK functionality in the TDM control center module, though I
don't
remember if that checkbox is available on 3.5.13.1 or not.
In 3.5.13.1 checkbox is not available, but will be in 3.5.13.2, which should be available soon.
Slavek
To unsubscribe, e-mail: trinity-devel-unsubscribe@lists.pearsoncomputing.net For additional commands, e-mail: trinity-devel-help@lists.pearsoncomputing.net Read list messages on the web archive: http://trinity-devel.pearsoncomputing.net/ Please remember not to top-post: http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
-
frigo -
Slávek Banko -
Timothy Pearson