Enforcing screen lock policies for RHEL 7 / KDE 4?

[Kodiak Firesmith]

I've gotten only a bit farther along in my progress.  I've set this in
/etc/kde4rc for testing:

[ScreenSaver][$i]
Enabled=true
LegacySaverEnabled=false
Lock=true
LockGrace=30000
PlasmaEnabled=false
Timeout=60

Problems:
I've tried removing LockGrace, setting it to 0, setting it to 5, etc.  No
matter what, the grace period seems to be indefinite.  The simple
screenlock will present when the activity idles for 60 seconds, but no
amount of time afterward will actually enforce the lock screen.  Once you
touch the mouse, even 3 or 4 minutes later, the screen lock disappears and
your desktop session comes back.

Switching users is the only case where the Simple Lock screen actually
forces you to enter a password.

Any ideas?

Also, what's up with the LockGrace being set in milliseconds and the
Timeout being set in seconds?

Thanks a bunch!
 - Kodiak

On Tue, Jun 20, 2017 at 12:34 PM, Kodiak Firesmith <kfiresmith at gmail.com>
wrote:

> Thanks again Rex and David,
> Somehow I missed that I have both an /etc/kderc and /etc/kde4rc file - the
> odd thing is that those wouldn't be found in my config path I supposed
> based on:
>
> # kde4-config --path config
>
>
> /root/.kde/share/config/:/etc/kde/:/usr/share/kde-settings/
> kde-profile/default/share/config/:/usr/share/config/
>
> Or are those understood to be pulled in regardless of path?
>
> I'm going to test this addition shortly:
>
> # cat /etc/kderc
>
>
> [Directories]
>
>
> kioskAdmin=root:
>
>
> profileDirsPrefix=/usr/share/kde-settings/kde-profile/
>
>
> userProfileMapFile=/etc/kde-user-profile
>
>
>
>
>
> [Directories-default]
>
>
> prefixes=/usr/share/kde-settings/kde-profile/default/
>
>
> [root at gobibear ksf]# cat /etc/kde4rc
>
>
> [Directories]
>
>
> kioskAdmin=root:
>
>
> profileDirsPrefix=/usr/share/kde-settings/kde-profile/
> ## a non-emtpy userProfileMapFile induces errors in kde4 apps atm
> #userProfileMapFile=/etc/kde-user-profile
>
> [Directories-default]
> prefixes=/usr/share/kde-settings/kde-profile/default/
> [root at gobibear ksf]# vim /etc/kderc
> [root at gobibear ksf]# rm /etc/kde/kscreensaverrc
> rm: remove regular file ‘/etc/kde/kscreensaverrc’? y
> [root at gobibear ksf]# cat /etc/kderc
> [Directories]
> kioskAdmin=root:
> profileDirsPrefix=/usr/share/kde-settings/kde-profile/
> userProfileMapFile=/etc/kde-user-profile
>
> [Directories-default]
> prefixes=/usr/share/kde-settings/kde-profile/default/
>
> [ScreenSaver][$i]
> Enabled=true
> LegacySaverEnabled=true
> Lock=true
> LockGrace=10
> PlasmaEnabled=false
> Saver=kblank.desktop
> Timeout=600
>
> Thanks again!
>  - Kodiak
>
> On Tue, Jun 20, 2017 at 12:27 PM, Rex Dieter <rdieter at math.unl.edu> wrote:
>
>>
>>
>> On 06/20/2017 10:53 AM, Kodiak Firesmith wrote:
>>
>>>
>>> I looked for system-level configs for KDE in /etc and was saddened to
>>> discover no location in /etc/ to make a global override.
>>>
>>> /etc/kde should be supported, output from this should tell you the path
>> that is searched:
>>
>> kde4-config --path config
>>
>> -- Rex
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/enterprise/attachments/20170620/7d1f206a/attachment.html>