24 Jun
2013
24 Jun
'13
11:49 a.m.
Hi,
I am not sure I am writing to the right list, but this is the only place
where I found anything about the aforementioned dialog.
I am trying to create a lockdown environment using Trinity Desktop and
Ubuntu 12.04LTS. It is all good and fine except that after the first login
if I press CTRL+ALT+DEL the dialog appears and makes logging of, restarting
the machine possible, which are some things I want to deny users.
However if I log out and log in again the same key combination does
nothing. I tried comparing configurations before after without success. I
added new users test1, test2 and after reboot logged in using test1 then
test2, skipped the wizard both times. In case of test1 the dialog appeared
upon CTRL+ALT+DEL in case of test2 it did not. Even for the user with
lockdown profile the same rule applies, after first login dialog appears,
second and subsequent(tried 4 times) logins no dialog.
Is this a bug or am I missing something? Is there a way to turn this thing
off totally?
Thank you
Frigyes Pratser
/etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04
DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION="Ubuntu 12.04 LTS"
dpkg -l | grep trinity
ii ark-trinity 4:3.5.13-1ubuntu0+ax2~precise
graphical archiving tool for Trinity
ii arts-trinity 4:3.5.13-1ubuntu0+ax2~precise
sound system from the official KDE release
ii gtk-qt-engine-trinity 4:3.5.13-1ubuntu0+ax2~precise
theme engine using Qt for GTK+ 2.x and Trinity
ii hal-trinity 0.5.14-8
Hardware Abstraction Layer [Trinity]
ii kappfinder-trinity 4:3.5.13-1ubuntu0+ax3~precise
non-KDE application finder for KDE
ii kate-trinity 4:3.5.13-1ubuntu0+ax3~precise
advanced text editor for KDE
ii kcontrol-trinity 4:3.5.13-1ubuntu0+ax3~precise
control center for KDE
ii kcron-trinity 4:3.5.13-1ubuntu0+ax1~precise
the Trinity crontab editor
ii kdbusnotification-trinity 4:3.5.13-1ubuntu0+ax2~precise
a DBUS notification service [Trinity]
ii kde-style-qtcurve-trinity 4:3.5.13-1ubuntu0+ax1~precise
This is a set of widget styles for Trinity based apps
ii kde-systemsettings-trinity 4:3.5.13-1ubuntu0+ax1~precise
easy to use control centre for TDE
ii kdeadmin-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax1~precise
Trinity file metainfo plugins for deb and rpm files
ii kdebase-data-trinity 4:3.5.13-1ubuntu0+ax3~precise
shared data files for the KDE base module
ii kdebase-kio-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise
core I/O slaves for KDE
ii kdebase-runtime-data-common-trinity 4:3.5.13-1ubuntu0+ax3~precise
Shared common files for Trinity and KDE4
ii kdebase-trinity 4:3.5.13-1ubuntu0+ax3~precise
base components from the official KDE release
ii kdebase-trinity-bin 4:3.5.13-1ubuntu0+ax3~precise
core binaries for the KDE base module
ii kdegraphics-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax2~precise
KDE metainfo plugins for graphic files
ii kdelibs-data-trinity 4:3.5.13-1ubuntu0+ax5~precise
core shared data for all TDE applications
ii kdelibs4c2a-trinity 4:3.5.13-1ubuntu0+ax5~precise
core libraries and binaries for all TDE applications
ii kdemultimedia-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise
au/avi/m3u/mp3/ogg/wav plugins for kfile
ii kdemultimedia-kio-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise
enables the browsing of audio CDs under Konqueror
ii kdenetwork-filesharing-trinity 4:3.5.13-1ubuntu0+ax2~precise
network filesharing configuration module for Trinity
ii kdenetwork-kfile-plugins-trinity 4:3.5.13-1ubuntu0+ax2~precise
torrent metainfo plugin for Trinity
ii kdepasswd-trinity 4:3.5.13-1ubuntu0+ax3~precise
password changer for KDE
ii kdeprint-trinity 4:3.5.13-1ubuntu0+ax3~precise
print system for KDE
ii kdesktop-trinity 4:3.5.13-1ubuntu0+ax3~precise
miscellaneous binaries and files for the KDE desktop
ii kdm-trinity 4:3.5.13-1ubuntu0+ax3~precise
X display manager for KDE
ii kdnssd-trinity 4:3.5.13-1ubuntu0+ax2~precise
Zeroconf support for KDE
ii kfind-trinity 4:3.5.13-1ubuntu0+ax3~precise
file-find utility for KDE
ii kghostview-trinity 4:3.5.13-1ubuntu0+ax2~precise
PostScript viewer for Trinity
ii kgtk-qt3-trinity 4:3.5.13-1ubuntu0+ax0~precise
Use KDE dialogs in Gtk apps
ii khelpcenter-trinity 4:3.5.13-1ubuntu0+ax3~precise
help center for KDE
ii kicker-trinity 4:3.5.13-1ubuntu0+ax3~precise
desktop panel for KDE
ii kio-locate-trinity 4:3.5.13-1ubuntu0+ax1~precise
kio-slave for the locate command [Trinity]
ii klipper-trinity 4:3.5.13-1ubuntu0+ax3~precise
clipboard utility for Trinity
ii kmenuedit-trinity 4:3.5.13-1ubuntu0+ax3~precise
menu editor for KDE
ii kmix-trinity 4:3.5.13-1ubuntu0+ax3~precise
sound mixer applet for Trinity
ii knetworkconf-trinity 4:3.5.13-1ubuntu0+ax1~precise
Trinity network configuration tool
ii konq-plugins-trinity 4:3.5.13-1ubuntu0+ax3~precise
plugins for Konqueror, the Trinity file/web/doc browser
ii konqueror-nsplugins-trinity 4:3.5.13-1ubuntu0+ax3~precise
Netscape plugin support for Konqueror
ii konqueror-trinity 4:3.5.13-1ubuntu0+ax3~precise
KDE's advanced file manager, web browser and document viewer
ii konsole-trinity 4:3.5.13-1ubuntu0+ax3~precise
X terminal emulator for KDE
ii kpager-trinity 4:3.5.13-1ubuntu0+ax3~precise
desktop pager for KDE
ii kpdf-trinity 4:3.5.13-1ubuntu0+ax2~precise
PDF viewer for Trinity
ii kpersonalizer-trinity 4:3.5.13-1ubuntu0+ax3~precise
installation personalizer for KDE
ii ksmserver-trinity 4:3.5.13-1ubuntu0+ax3~precise
session manager for KDE
ii ksnapshot-trinity 4:3.5.13-1ubuntu0+ax2~precise
screenshot utility for Trinity
ii ksplash-engine-moodin-trinity 4:3.5.13-1ubuntu0+ax1~precise
fading splash screen engine for Trinity
ii ksplash-trinity 4:3.5.13-1ubuntu0+ax3~precise
the KDE splash screen
ii ksvg-trinity 4:3.5.13-1ubuntu0+ax2~precise
SVG viewer for Trinity
ii ksysguard-trinity 4:3.5.13-1ubuntu0+ax3~precise
system guard for KDE
ii ksysguardd-trinity 4:3.5.13-1ubuntu0+ax3~precise
system guard daemon for KDE
ii ksystemlog-trinity 4:3.5.13-1ubuntu0+ax1~precise
system log viewer tool for Trinity
ii ktip-trinity 4:3.5.13-1ubuntu0+ax3~precise
useful tips for KDE
ii kubuntu-default-settings-trinity 1:10.10-9~lucid
Default settings and artwork for the Debian KDE3 desktop
ii kubuntu-desktop-trinity 1:78
Kubuntu desktop system, TDE version
ii kwin-style-crystal-trinity 4:3.5.13-1ubuntu0+ax1~precise
semi transparant window decoration for Trinity
ii kwin-trinity 4:3.5.13-1ubuntu0+ax3~precise
the KDE window manager
ii libarts1-akode-trinity 4:3.5.13-1ubuntu0+ax3~precise
akode plugin for aRts
ii libarts1c2a-trinity 4:3.5.13-1ubuntu0+ax2~precise
aRts sound system core components
ii libartsc0-trinity 4:3.5.13-1ubuntu0+ax2~precise
aRts sound system C support library
ii libkcddb1-trinity 4:3.5.13-1ubuntu0+ax3~precise
CDDB library for Trinity
ii libkonq4-trinity 4:3.5.13-1ubuntu0+ax3~precise
core libraries for Konqueror
ii libsmokeqt1-trinity 4:3.5.13-1ubuntu0+ax2~precise
SMOKE Binding Library to Qt
ii sudo-trinity 1.9
TDE sudo
24 Jun
24 Jun
5:26 p.m.
New subject: [trinity-devel] Secure Desktop Area dialog
Dne po 24. června 2013 frigo napsal(a):
Hi,
I am not sure I am writing to the right list, but this is the only
place where I found anything about the aforementioned dialog.
I am trying to create a lockdown environment using Trinity Desktop and
Ubuntu 12.04LTS. It is all good and fine except that after the first
login if I press CTRL+ALT+DEL the dialog appears and makes logging of,
restarting the machine possible, which are some things I want to deny
users.
However if I log out and log in again the same key combination does
nothing. I tried comparing configurations before after without success.
I added new users test1, test2 and after reboot logged in using test1
then test2, skipped the wizard both times. In case of test1 the dialog
appeared upon CTRL+ALT+DEL in case of test2 it did not. Even for the
user with lockdown profile the same rule applies, after first login
dialog appears, second and subsequent(tried 4 times) logins no dialog.
Is this a bug or am I missing something? Is there a way to turn this
thing off totally?
Thank you
Frigyes Pratser
If you want to completely disable SAK in /etc/trinity/kdm/kdmrc enable
line UseSAK=false.
Note: For user queries such as this would be the correct mailing-list
trinity-users.
Slavek
--
7:09 p.m.
New subject: [trinity-devel] Secure Desktop Area dialog
Hi,
I am not sure I am writing to the right list, but this is the only place
where I found anything about the aforementioned dialog.
I am trying to create a lockdown environment using Trinity Desktop and
Ubuntu 12.04LTS. It is all good and fine except that after the first login
if I press CTRL+ALT+DEL the dialog appears and makes logging of,
restarting
the machine possible, which are some things I want to deny users.
However if I log out and log in again the same key combination does
nothing. I tried comparing configurations before after without success. I
added new users test1, test2 and after reboot logged in using test1 then
test2, skipped the wizard both times. In case of test1 the dialog appeared
upon CTRL+ALT+DEL in case of test2 it did not. Even for the user with
lockdown profile the same rule applies, after first login dialog appears,
second and subsequent(tried 4 times) logins no dialog.
Is this a bug or am I missing something? Is there a way to turn this thing
off totally?
3.5.13.1 has known problems with the Secure Desktop Area dialog. You can
disable it completely if you disable all SAK (Ctrl+Alt+Del) capability on
the system, though I don't know if this would be an option for your
environment. The development version of TDE provides a checkbox to
disable SAK functionality in the TDM control center module, though I don't
remember if that checkbox is available on 3.5.13.1 or not.
Note that the Secure Desktop Area dialog uses normal DCOP calls for
shutdown/restart, so if those actions are allowed from the Secure Desktop
Area dialog, then the user would likely be able to initiate those same
actions from a terminal with DCOP (or possibly even with kdcop if
available).
Hope this helps!
Tim
7:58 p.m.
New subject: [trinity-devel] Secure Desktop Area dialog
On Monday 24 of June 2013 21:09:01 Timothy Pearson wrote:
The development version of TDE provides a checkbox to
disable SAK functionality in the TDM control center module, though I don't
remember if that checkbox is available on 3.5.13.1 or not.
In 3.5.13.1 checkbox is not available, but will be in 3.5.13.2, which should
be available soon.
Slavek
--
25 Jun
25 Jun
7:19 a.m.
New subject: [trinity-devel] Secure Desktop Area dialog
Hi!
Thank you for your answers! Next time I am going to use the other list, but
hope it is OK to continue this thread here, to keep the information
together.
I tried to enable the line "UseSAK=false" in "/etc/trinity/kdm/kdmrc"
under
section "[X-*-Greeter]" to no avail. After reboot and the first login the
dialog appears just like before.
"The development version of TDE provides a checkbox to
disable SAK functionality in the TDM control center module, though I don't
remember if that checkbox is available on 3.5.13.1 or not."
Just to be sure, the functionality of this checkbox is exactly the same
like enabling the "UseSAK" line in the config?
Disabling the DCOP calls would be an option, but one I want to avoid. The
lockdown environment allows the few users who can access it only to start
some pre-defined programs, so messing with dcop in a terminal is not a
problem. My biggest concern is that the dialog hides all other application
windows and I have to make sure that some of the applications are always
visible. The users could be told to never push CTRL+ALT+DEL, but I'd rather
control this behavior just to be on the safe side.
Thank you
Frigyes
On Mon, Jun 24, 2013 at 9:58 PM, Slávek Banko <slavek.banko(a)axis.cz> wrote:
On Monday 24 of June 2013 21:09:01 Timothy Pearson
wrote:
The development version of TDE provides a
checkbox to
disable SAK functionality in the TDM control center module, though I
don't
remember if that checkbox is available on
3.5.13.1 or not.
In 3.5.13.1 checkbox is not available, but will be in 3.5.13.2, which
should
be available soon.
Slavek
--
---------------------------------------------------------------------
To unsubscribe, e-mail:
trinity-devel-unsubscribe(a)lists.pearsoncomputing.net
For additional commands, e-mail:
trinity-devel-help(a)lists.pearsoncomputing.net
Read list messages on the web archive:
http://trinity-devel.pearsoncomputing.net/
Please remember not to top-post:
http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
27 Aug
27 Aug
2:11 p.m.
New subject: [trinity-devel] Secure Desktop Area dialog
Hello!
I got to the point where I have to solve this problem and found out that
the suggested "UseSAK=false" solution works. I wanted to enable auto login
and changed my /etc/trinity/kdm/kdmrc but my changes just didn't seem to
work. Last time it didn't cross my mind to check if changes in
/etc/trinity/kdm/kdmrc are effective or not, I just assumed they are. Then
I saw a file named /etc/trinity/kdm/kdmdistrc and after deleting it all my
changes worked.
According to
http://git.trinitydesktop.org/cgit/tdebase/tree/kcontrol/kdm/main.cpp?id=2d…
kdmdistrc
has priority over kdmrc.
So as far as my knowledge goes, as long as kdmdistrc is present no options
in kdmrc are read, so UseSAK never had a chance to be effective.
Is my assumption right and is kdmdistrc documented somewhere?
Cheers
Frigyes Pratser
On Tue, Jun 25, 2013 at 9:19 AM, frigo <pratser.frigyes(a)gmail.com> wrote:
Hi!
Thank you for your answers! Next time I am going to use the other list,
but hope it is OK to continue this thread here, to keep the information
together.
I tried to enable the line "UseSAK=false" in
"/etc/trinity/kdm/kdmrc"
under section "[X-*-Greeter]" to no avail. After reboot and the first login
the dialog appears just like before.
"The development version of TDE provides a checkbox to
disable SAK functionality in the TDM control center module, though I don't
remember if that checkbox is available on 3.5.13.1 or not."
Just to be sure, the functionality of this checkbox is exactly the same
like enabling the "UseSAK" line in the config?
Disabling the DCOP calls would be an option, but one I want to avoid. The
lockdown environment allows the few users who can access it only to start
some pre-defined programs, so messing with dcop in a terminal is not a
problem. My biggest concern is that the dialog hides all other application
windows and I have to make sure that some of the applications are always
visible. The users could be told to never push CTRL+ALT+DEL, but I'd rather
control this behavior just to be on the safe side.
Thank you
Frigyes
On Mon, Jun 24, 2013 at 9:58 PM, Slávek Banko <slavek.banko(a)axis.cz>wrote;wrote:
On Monday 24 of June 2013 21:09:01 Timothy
Pearson wrote:
The development version of TDE provides a
checkbox to
disable SAK functionality in the TDM control center module, though I
don't
remember if that checkbox is available on
3.5.13.1 or not.
In 3.5.13.1 checkbox is not available, but will be in 3.5.13.2, which
should
be available soon.
Slavek
--
---------------------------------------------------------------------
To unsubscribe, e-mail:
trinity-devel-unsubscribe(a)lists.pearsoncomputing.net
For additional commands, e-mail:
trinity-devel-help(a)lists.pearsoncomputing.net
Read list messages on the web archive:
http://trinity-devel.pearsoncomputing.net/
Please remember not to top-post:
http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
3892
days inactive
3956
days old
5 comments
3 participants
participants (3)
-
frigo -
Slávek Banko -
Timothy Pearson