trinity-devel@lists.pearsoncomputing.net

Message: previous - next
Month: June 2013

Re: [trinity-devel] Secure Desktop Area dialog

From: "Timothy Pearson" <kb9vqf@...>
Date: Mon, 24 Jun 2013 14:09:01 -0500
> Hi,
>
> I am not sure I am writing to the right list, but this is the only place
> where I found anything about the aforementioned dialog.
>
> I am trying to create a lockdown environment using Trinity Desktop and
> Ubuntu 12.04LTS. It is all good and fine except that after the first login
> if I press CTRL+ALT+DEL the dialog appears and makes logging of,
> restarting
> the machine possible, which are some things I want to deny users.
>
> However if I log out and log in again the same key combination does
> nothing. I tried comparing configurations before after without success. I
> added new users test1, test2 and after reboot logged in using test1 then
> test2, skipped the wizard both times. In case of test1 the dialog appeared
> upon CTRL+ALT+DEL in case of test2 it did not. Even for the user with
> lockdown profile the same rule applies, after first login dialog appears,
> second and subsequent(tried 4 times) logins no dialog.
>
> Is this a bug or am I missing something? Is there a way to turn this thing
> off totally?

3.5.13.1 has known problems with the Secure Desktop Area dialog.  You can
disable it completely if you disable all SAK (Ctrl+Alt+Del) capability on
the system, though I don't know if this would be an option for your
environment.  The development version of TDE provides a checkbox to
disable SAK functionality in the TDM control center module, though I don't
remember if that checkbox is available on 3.5.13.1 or not.

Note that the Secure Desktop Area dialog uses normal DCOP calls for
shutdown/restart, so if those actions are allowed from the Secure Desktop
Area dialog, then the user would likely be able to initiate those same
actions from a terminal with DCOP (or possibly even with kdcop if
available).

Hope this helps!

Tim