To completely disable command line access, you will need to make
configuration changes in a number of different contexts:
Set the disable_command_line gconf
key, which prevents the user from accessing the terminal or
specifying a command line to be executed
Disable the Command Line
Disable console switching by editing /etc/X11/xorg.conf
Remove the menu item
These steps are described below.
- Setting the disable_command_line
Set the /desktop/gnome/lockdown/disable_command_line key by
using GConf editor as shown in
Figure 4-6. Setting this key also disables access to the
Run Application panel dialog.
Figure 4-6. Setting the disable_command_line GConf Key
- Disabling the Command Line (Mini
To disable this applet, you will need to add the applet IID
OAFIID:GNOME_MiniCommanderApplet to the
list of disabled applets. Refer to
Section 4.3.1 Disabling Applets for information on
- Disabling Console Switching
Access to all virtual consoles can be disabled by adding a
DontVTSwitch option to the
Serverflags section in the
X configuration file /etc/X11/xorg.conf.
Option "DontVTSwitch" "yes"
- Removing the menu item
The menu containing the
menu item will automatically be removed when all desktop icons are
removed by unsetting the /apps/nautilus/preferences/show_desktop key. When
this key is unset, Nautilus no longer
controls the desktop. Refer to Section 4.6
Removing Desktop Icons for instructions for unsetting