This is a post I made yesterday to the fedora-list. There have been no replies yet. I'm hoping someone here can give me a clue on how to disable gnome "User Switching" or offer opinions on the following. The behavior is a little unsettling.
TIA, John
----
Here's my example usage :
1) Setup auto login :
edit :
/etc/gdm/custom.conf
...
[daemon] AutomaticLoginEnable=true AutomaticLogin=my_uname
2) Restart to runlevel 5, experience autologin as "my_uname".
3) Activate System->Lockscreen menu option. (screen saver starts)
Note : at this point, I expect my screen to be password protected.
4) Wiggle mouse for authentication dialog. Don't enter password; click the "Switch User" button.
Try # 1 : Get directly to desktop, no password needed.
5) Repeat steps 3,4.
Try # 2 : Get login greeter on try #2. Select "Automatic Login" user, get directly to desktop, no password needed.
6) Attempt to disable the "Switch User" button :
# gconf-editor apps->gnome-screensaver->user_switch_enabled=false desktop->gnome->disable_user_switching=true
Note : at this point, I expect user switching to be disabled.
7) Restart to runlevel 5. Same behavior; user switching is still enabled and exhibits the same "no password" behavior of steps 3-5.
Questions : ----------- Is it expected that once autologin is enabled, access to that account is password free, even though the locking screensaver is activated?
Is there a way to actually disable the switch user button in the screensaver authentication dialog?
On Fri, 17 Oct 2008, Skunk Worx wrote:
This is a post I made yesterday to the fedora-list. There have been no replies yet. I'm hoping someone here can give me a clue on how to disable gnome "User Switching" or offer opinions on the following. The behavior is a little unsettling.
TIA, John
I'd consider this as bug with security implications too.. to me it seems as kind of serious problem worth to report into bugzilla.
Adam Pribyl
Adam Pribyl wrote:
On Fri, 17 Oct 2008, Skunk Worx wrote:
This is a post I made yesterday to the fedora-list. There have been no replies yet. I'm hoping someone here can give me a clue on how to disable gnome "User Switching" or offer opinions on the following. The behavior is a little unsettling.
TIA, John
I'd consider this as bug with security implications too.. to me it seems as kind of serious problem worth to report into bugzilla.
Adam Pribyl
Thanks for the suggestion, Adam...bz # 467569
--- John
Skunk Worx wrote:
Adam Pribyl wrote:
On Fri, 17 Oct 2008, Skunk Worx wrote:
This is a post I made yesterday to the fedora-list. There have been no replies yet. I'm hoping someone here can give me a clue on how to disable gnome "User Switching" or offer opinions on the following. The behavior is a little unsettling.
TIA, John
I'd consider this as bug with security implications too.. to me it seems as kind of serious problem worth to report into bugzilla.
Adam Pribyl
Thanks for the suggestion, Adam...bz # 467569
John
Note : renaming /usr/bin/gdmflexiserver, as mentioned in a similar Ubuntu bug report (referenced in the bz), appears to disable the "Switch User" button.
--- John
On Sat, Oct 18, 2008 at 11:59:02AM -0700, Skunk Worx wrote:
Skunk Worx wrote:
Adam Pribyl wrote:
On Fri, 17 Oct 2008, Skunk Worx wrote:
This is a post I made yesterday to the fedora-list. There have been no replies yet. I'm hoping someone here can give me a clue on how to disable gnome "User Switching" or offer opinions on the following. The behavior is a little unsettling.
I'd consider this as bug with security implications too.. to me it seems as kind of serious problem worth to report into bugzilla.
Thanks for the suggestion, Adam...bz # 467569
Note : renaming /usr/bin/gdmflexiserver, as mentioned in a similar Ubuntu bug report (referenced in the bz), appears to disable the "Switch User" button.
That's definitely not the right solution for disabling user switching.
I believe the correct way is to edit /etc/gconf/schemas/desktop_gnome_lockdown.schemas, changing the entry:
/schemas/desktop/gnome/lockdown/disable_user_switching
...to be <default>true</default> for all users.
You should never have to monkey with things in /usr to set configurations like this.
On Sun, 2008-10-19 at 18:05 -0400, Paul W. Frields wrote:
On Sat, Oct 18, 2008 at 11:59:02AM -0700, Skunk Worx wrote:
Skunk Worx wrote:
Adam Pribyl wrote:
On Fri, 17 Oct 2008, Skunk Worx wrote:
This is a post I made yesterday to the fedora-list. There have been no replies yet. I'm hoping someone here can give me a clue on how to disable gnome "User Switching" or offer opinions on the following. The behavior is a little unsettling.
I'd consider this as bug with security implications too.. to me it seems as kind of serious problem worth to report into bugzilla.
Thanks for the suggestion, Adam...bz # 467569
Note : renaming /usr/bin/gdmflexiserver, as mentioned in a similar Ubuntu bug report (referenced in the bz), appears to disable the "Switch User" button.
That's definitely not the right solution for disabling user switching.
I believe the correct way is to edit /etc/gconf/schemas/desktop_gnome_lockdown.schemas, changing the entry:
/schemas/desktop/gnome/lockdown/disable_user_switching
...to be <default>true</default> for all users.
You should never have to monkey with things in /usr to set configurations like this.
That is right....but changing a gconf schema is not the right way to change a default either. Run gconf-editor as root, open a "Defaults Window", and change the value there. That'll make the change in the "Defaults database" in /etc/gconf/gconf.xml.defaults. If you don't want any user to be able to change this, you can use a "Mandatory Window", to make the change in the "Mandatory database", which takes precedence over user settings.
Matthias