Tuesday, 3. April 2012
did you install a kde-centric distribution on your parents pc? do you want to set up an internet terminal in a public area or in your office and you are tired of being called because a toolbar or an important widget has suddenly disappeared ?
the solution is easy.. lock down kde (plasma-desktop) !
there are several ways to do so..
the bad: take away the file permissions of .kde (don’t ! seriously.. if you have to, then make plasma-desktoprc and plasma-desktop-appletsrc read-only.. nothing else! )
the other: use the kiosk framework
http://techbase.kde.org/KDE_System_Administration/Kiosk/Keys
to do so you create a file called /etc/kde4/kdeglobals (or add your options to ~/.kde/share/config/kdeglobals) and write something like the following in it: (there is a GUI for that in development but it’s still in “extragear”)
[KDE Action Restrictions][$i]
action/lock_screen=false
movable_toolbars=false
run_command=false
plasma-desktop/add_activities=false
the [$i] will make the whole section immutable - that means it will not be overwritten by any user configfiles read afterwards. (the given example will remove the lock-screen option, disable the run-command interface (krunner), lock application toolbars and disable the add activities feature)
unfortunately some of the options in the kiosk documentation (especially the plasma specific ones) are not up2date (i am trying to talk with developers about this issue) therefore you will not be able to lock down plasma completely just by using something like plasma/containment_context_menu=false (it doesn’t work) but there is another solution to lock down plasma and make the “unlock widgets” entry disappear !
just write a single [$i] in the first line of ~/.kde/share/config/plasma-desktop-appletsrc – this will make the whole file immutable and hide the unlock widgets context menu entry. of course [$i] can be used to lock down specific widgets(sections) or just single options like height or width of the folder view widget for example.
be aware that anybody who knows how to find those config files is still able to alter them!
in order to secure the desktop completely you’ll have to write those changes to /etc/kde4 and lock down every single section by hand (or at least remove the filemanager icon ^^)