On Monday, 20 בFebruary 2006 12:46, Tzafrir Cohen wrote:
> On Sun, Feb 19, 2006 at 02:03:22AM +0200, Oded Arbel wrote:
> > On Friday, 17 �February 2006 21:38, Omer Zak wrote:
> > > In another Linux related mailing list, to which I am subscribed,
> > > there is a discussion about the remaining roadblocks on the route
> > > of widespread adoption of Linux by businesses.
> > >
> > > Turns out that IE has configuration options, which allow the
> > > sysadmin to lock down various features.
> >
> > KDE offered for quite some time a system called "Kiosk" which
> > allows an administrator to "lock down" certain features of KDE -
> > which includs desktop settings and application settings - including
> > Konqueror.
> >
> > GNOME 2.14 will come out with a similar tool (whose name escapes me
> > atm), and I assume it will allow you to do the same for a GNOME
> > browser (which is what currently ? Epiphany ? My Mandriva
> > installation runs firefox when needing a browser in GNOME).
>
> This naturally assumes that the user does not install a private copy
> of the app. Which is a bit tougher in the case of firefox. And
> frankly even in the case of OpenOffice. Both are rather
> self-contained.
Its the same problem for any app: what would prevent a user from
downloading and compiling a KDE where the kiosk support it disabled ?
The solution to that is pretty simple: mount /home as noexec (and of
course make sure that all other user writeable locations are also
noexec).
--
Oded
::..
"Civilization, as we know it today, owes it's existence to the
engineers. These are the men who, down the long centuries, have learned
to exploit the properties of matter and the sources of power for the
benefit of mankind."
-- L. Sprague DeCamp
================================================================To unsubscribe,
send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
