The GNOME Desktop includes features you can use to restrict access to certain of its functions. These disable (or lockdown) features let you restrict the actions that users can perform on a computer. For example, you might want to prevent command line operations on a computer that is for public use at a trade show.
You disable feature by setting GConf keys (see Using GConf for Defaults). You can also use the Configuration Editor application to set GConf keys in a user configuration source (see Configuration Editor).
To disable the lock screen and log out functions, set the /apps/panel/global/disable_lock_screen key and the /apps/panel/global/disable_log_out key to True.
When you disable the lock screen and log out functions, the following items are removed from the panels:
To open this menu, right-click a vacant space on a panel and then click.
Additionally, any Lock Screen buttons and Log Out buttons on panels are disabled.
To disable operations from a command line, set the /desktop/gnome/lockdown/disable_command_line key to True.
When you disable command line operations, the following changes occur in the user interface:
To disable command line operations, you must also remove menu items that start terminal applications. For example, you might want to remove menu items that contain the following commands:
These items are removed from the following menus:
To disable command line operations, you must also disable the Command Line applet. To disable this applet, add the applet to the /apps/panel/global/disabled_applets key. When you disable the Command Line applet, it is removed from the Main Menu and the Add to Panel > Utility menu.
To disable panel configuration, set the /apps/panel/global/locked_down key to True.
When you disable panel configuration, the following changes occur in the user interface: