PDA

View Full Version : [ubuntu] Restricting Users in Ubuntu 12.04 64bit Desktop



mmehboobhan
July 19th, 2012, 07:23 AM
Hi all.

I am customizing Ubuntu 12.04 Desktop for a school lab. So i install gnome classic and made the desktop environment just like Windows using compiz and ubuntu tweak etc.
Now i want to restrict normal users from following..



Restrict users changing wallpapers & themes
Restrict users adding / deleting system panels.
Restrict users installing / deleting packages.
Restrict users to delete desktop icons.
Restrict to change IP address manually.
Disable USB storage devices.

Any help in this regard will be highly appreciated.

Thanks in Advance


Khan

ykkhern
July 24th, 2012, 09:03 AM
Restrict users installing / deleting packages.
Restrict to change IP address manually.



Just create the USER account with account type "Standard" will do.






Disable USB storage devices.



Modify this file "/usr/share/polkit-1/actions/org.freedesktop.udisks.policy", look for the following section:
<action id="org.freedesktop.udisks.filesystem-mount">
<description>Mount a device</description>
<description xml:lang="da">Montér en enhed</description>
<description xml:lang="de">Gerät einhängen</description>
<description xml:lang="pt_BR">Montar um dispositivo</description>
<message>Authentication is required to mount the device</message>
<message xml:lang="da">Autorisering er påkrævet for at montere et fil system</message>
<message xml:lang="de">Zugriffsrechte werden benötigt um das Gerät einzuhängen</message>
<message xml:lang="pt_BR">Autenticação é requerida para montar o dispositivo</message>
<defaults>
<allow_any>no</allow_any>
<allow_inactive>no</allow_inactive>
<allow_active>yes</allow_active>
</defaults>
</action>
Change the line highlighted in red font to:
<allow_active>auth_admin</allow_active>This way, you'll need to provide Administrator password in order to mount the USB drive whenever you plug in any USB Storage device.