KDE Kiosk Question (John Cooper)

Tue Jan 30 23:02:53 UTC 2018

 1. RE: KDE Kiosk Question (John Cooper)

----------------------------------------------------------------------

On Thu, Jan 25, 2018 at 1:00 PM <enterprise-request at kde.org> wrote:

> Send Enterprise mailing list submissions to
>         enterprise at kde.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://mail.kde.org/mailman/listinfo/enterprise
> or, via email, send a message with subject or body 'help' to
>         enterprise-request at kde.org
>
> You can reach the person managing the list at
>         enterprise-owner at kde.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Enterprise digest..."
>
>
> Today's Topics:
>
>    1. RE: KDE Kiosk Question (John Cooper)
>
>
unfortunately as far as i know there is nothing out there thats even
rudimentary going into the same direction as "securedesktop"  ... there WAS
the
kde kiosk tool -- 13 years ago it was developed and even ported to kde4 ...
i managed to install and run it a long time ago but it didn't work anymore
because most of the config files changed names in the last years and a lot
of settings just did not make it into plasma5 or were renamed

for my life-exam desktop i strongly depend on the kde kiosk system and i
hope it continues to be extended and developed ..
because there is no kiosk tool anymore and i need something simple to lock
down the desktop, especially for the classroom computers, i started (today)
with a very very .. very rudimentary version of a new kiosk tool.....

it's going to be so simple that every "python beginner" is going to
understand how it works and should be able to extend, bugfix, develop it..

currently 5 basic .kiosk config files that contain all the available kiosk
"keys" (restrictions)

like this:
----------------------------
[Action-1]
Type=action restriction
Key=action/kwin_rmb
Name=Disable Window Manager context menu (Alt-F3)
Description=The Window Manager context menu is normally shown when Alt-F3
is pressed or when the menu button on the window frame is pressed
----------------------------

and a very basic UI that autogenerates itself for the most part by reading
those config files..
http://life-edu.eu/images/life-kiosk.png

an apply button that writes all settings into the appropriate plasma
configuration files.. and reloads the desktop.

thats it...  and its not working at the moment because as i said.. i just
started ...
but you can follow (or join) the development here:
https://github.com/valueerrorx/life-kiosk

(it hopefully can be of some use)

glhf

thomas

PS:  of course this thing can grow and features like "userprofiles" etc.
may follow in the future.. but for now i'd like to keep it short and
simple.. you will be able to lock everything down for the current user only
or globally..

> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 25 Jan 2018 10:59:50 +0000
> From: John Cooper <John.Cooper at Equallives.org.uk>
> To: "'enterprise at kde.org'" <enterprise at kde.org>
> Subject: RE: KDE Kiosk Question
> Message-ID:
>         <1E8505A2DBA65F47AB846F1FF54F23F80A7DBE10 at Venus.Equal-Lives.local>
> Content-Type: text/plain; charset="utf-8"
>
> I'm currently trying to find out whether there is an open source or free
> alternative equivalent to Visual Automation, Inc's "Secure Desktop" which
> is currently at release 10 (
> http://visualautomation.com/securedesktop/index.html). Does anyone on the
> Enterprise listing in an enterprise environment know of one which I can
> trial and use for my environment?
>
>
> This message contains confidential information and is intended only for
> the individual named. If you are not the named addressee you should not
> disseminate,distribute or copy this e-mail. Please notify the sender
> immediately by e-mail if you have received this e-mail by mistake and
> delete this e-mail from your system. E-mail transmission cannot be
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
> The sender therefore does not accept liability for any errors or omissions
> in the contents of this message, which arise as a result of e-mail
> transmission. If verification is required please request a hard-copy
> version.
>
> -----Original Message-----
> From: Enterprise [mailto:enterprise-bounces at kde.org] On Behalf Of John
> Cooper
> Sent: 25 January 2018 10:19
> To: 'enterprise at kde.org' <enterprise at kde.org>
> Subject: RE: KDE Kiosk Question
>
> I'm also trying to setup KDE like a kiosk and/or thin client. However
> there is an issue where if the low privileges auto logon account doesn't
> have a password. The unlock screen doesn't work it fails to unlock at all
> during the auto logon session. It would auto logon to the shared kiosk thin
> client account and then allow the user to utilise certain applications.
>
>
> This message contains confidential information and is intended only for
> the individual named. If you are not the named addressee you should not
> disseminate,distribute or copy this e-mail. Please notify the sender
> immediately by e-mail if you have received this e-mail by mistake and
> delete this e-mail from your system. E-mail transmission cannot be
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
> The sender therefore does not accept liability for any errors or omissions
> in the contents of this message, which arise as a result of e-mail
> transmission. If verification is required please request a hard-copy
> version.
>
> -----Original Message-----
> From: John Cooper
> Sent: 25 January 2018 10:02
> To: John Cooper <John.Cooper at Equallives.org.uk>
> Cc: 'enterprise at kde.org' <enterprise at kde.org>
> Subject: RE: KDE Kiosk Question
>
>
> Well either completely disabling KWallet on the shared account.
> Alternatively only allowing it to store and/or retrieve certain specified
> details. Though the Kiosk functionality as even though it securely encrypts
> and stores the account details. With a shared account though this
> functionality isn't as secure as another user of the account could retrieve
> them.
>
> While may be allowing different settings for another separate possibly
> higher privileged account.
>
> This message contains confidential information and is intended only for
> the individual named. If you are not the named addressee you should not
> disseminate,distribute or copy this e-mail. Please notify the sender
> immediately by e-mail if you have received this e-mail by mistake and
> delete this e-mail from your system. E-mail transmission cannot be
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
> The sender therefore does not accept liability for any errors or omissions
> in the contents of this message, which arise as a result of e-mail
> transmission. If verification is required please request a hard-copy
> version.
>
> -----Original Message-----
> From: Enterprise [mailto:enterprise-bounces at kde.org] On Behalf Of John
> Cooper
> Sent: 25 January 2018 09:47
> To: 'Kai Uwe Broulik' <kde at privat.broulik.de>
> Cc: 'enterprise at kde.org' <enterprise at kde.org>
> Subject: RE: KDE Kiosk Question
>
> Just CC in enterprise mailing list.
>
>
> This message contains confidential information and is intended only for
> the individual named. If you are not the named addressee you should not
> disseminate,distribute or copy this e-mail. Please notify the sender
> immediately by e-mail if you have received this e-mail by mistake and
> delete this e-mail from your system. E-mail transmission cannot be
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
> The sender therefore does not accept liability for any errors or omissions
> in the contents of this message, which arise as a result of e-mail
> transmission. If verification is required please request a hard-copy
> version.
>
> -----Original Message-----
> From: Kai Uwe Broulik [mailto:kde at privat.broulik.de]
> Sent: 18 January 2018 16:37
> To: John Cooper <John.Cooper at Equallives.org.uk>
> Subject: Re: KDE Kiosk Question
>
> Lock down in what way?
>
> Can you please also CC the enterprise mailing list as I don't necessarily
> have expertise on all topics.
>
> Thanks
>
>
>   Ursprüngliche Nachricht
> Von: John.Cooper at Equallives.org.uk
> Gesendet: 18. Januar 2018 5:27 nachm.
> An: kde at privat.broulik.de
> Betreff: RE: KDE Kiosk Question
>
> I also are needing to lock down the KWallet as the KDE Neon installation
> are on a kiosk/shared workstation with shared accounts.
>
>
> This message contains confidential information and is intended only for
> the individual named. If you are not the named addressee you should not
> disseminate,distribute or copy this e-mail. Please notify the sender
> immediately by e-mail if you have received this e-mail by mistake and
> delete this e-mail from your system. E-mail transmission cannot be
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
> The sender therefore does not accept liability for any errors or omissions
> in the contents of this message, which arise as a result of e-mail
> transmission. If verification is required please request a hard-copy
> version.
>
>
> -----Original Message-----
> From: Kai Uwe Broulik [mailto:kde at privat.broulik.de]
> Sent: 18 January 2018 16:11
> To: John Cooper <John.Cooper at Equallives.org.uk>
> Subject: Re: KDE Kiosk Question
>
> Hi,
>
> > The kiosk documentation hasn't been updated since during 2016 and we
> > are now
> in 2018. Can anyone be contributor and update the documentation about this
> This setting wasn't listed in the Kiosk documentation so it is likely
> needing an update.
>
> Sure, it's a Wiki. As long as you have a KDE Identity account you should
> be able to edit it. We created scripts to automatically extract
> configuration from Plasma widgets, so perhaps something similar could be
> done for applications.
>
> > To more specific it is saving the items in Klipper's history I would
> > like to lock down. Not how much is held in the clipboard during the
> > session. Though having a setting if there is one for it to clear at
> > end of logged on session would be great.
>
> The key would be KeepClipboardContents, ie.
>
> [General]
> KeepClipboardContents[$i]=false
>
> Cheers
> Kai Uwe
>
>
>
>
>
> Norfolk Coalition of Disabled People Trading as Equal Lives
> 15 Manor Farm Barns
> Fox Road
> Framingham Pigot
> Norwich
> Norfolk
> NR14 7PZ
> Company Limited by Guarantee  Registered in England and Wales No. 4098341
> Registered Charity No. 1084108 Registered VAT No. 927 9604 86
>
> Please note this email is sent via an unsecure system and there may be a
> small risk that information may be intercepted.
> The information contained in this email is intended only for the person or
> organisation to which it is addressed. If you have received it by mistake,
> please disregard and notify the sender immediately. Unauthorised disclosure
> or use of such information may be a breach of legislation or
> confidentiality and may be legally privileged.
> Emails sent from and received by volunteers and employees of Equal Lives
> may be monitored.
> Unless this email relates to Equal Lives business it will be regarded by
> Equal Lives as personal and will not be authorised by or sent on behalf of
> Equal Lives. The sender will have sole responsibility for any legal actions
> or disputes that may arise.
>
>
> Norfolk Coalition of Disabled People Trading as Equal Lives
> 15 Manor Farm Barns
> Fox Road
> Framingham Pigot
> Norwich
> Norfolk
> NR14 7PZ
> Company Limited by Guarantee  Registered in England and Wales No. 4098341
> Registered Charity No. 1084108 Registered VAT No. 927 9604 86
>
> Please note this email is sent via an unsecure system and there may be a
> small risk that information may be intercepted.
> The information contained in this email is intended only for the person or
> organisation to which it is addressed. If you have received it by mistake,
> please disregard and notify the sender immediately. Unauthorised disclosure
> or use of such information may be a breach of legislation or
> confidentiality and may be legally privileged.
> Emails sent from and received by volunteers and employees of Equal Lives
> may be monitored.
> Unless this email relates to Equal Lives business it will be regarded by
> Equal Lives as personal and will not be authorised by or sent on behalf of
> Equal Lives. The sender will have sole responsibility for any legal actions
> or disputes that may arise.
>
>
> Norfolk Coalition of Disabled People Trading as Equal Lives
> 15 Manor Farm Barns
> Fox Road
> Framingham Pigot
> Norwich
> Norfolk
> NR14 7PZ
> Company Limited by Guarantee  Registered in England and Wales No. 4098341
> Registered Charity No. 1084108 Registered VAT No. 927 9604 86
>
> Please note this email is sent via an unsecure system and there may be a
> small risk that information may be intercepted.
> The information contained in this email is intended only for the person or
> organisation to which it is addressed. If you have received it by mistake,
> please disregard and notify the sender immediately. Unauthorised disclosure
> or use of such information may be a breach of legislation or
> confidentiality and may be legally privileged.
> Emails sent from and received by volunteers and employees of Equal Lives
> may be monitored.
> Unless this email relates to Equal Lives business it will be regarded by
> Equal Lives as personal and will not be authorised by or sent on behalf of
> Equal Lives. The sender will have sole responsibility for any legal actions
> or disputes that may arise.
>
>
> Norfolk Coalition of Disabled People Trading as Equal Lives
> 15 Manor Farm Barns
> Fox Road
> Framingham Pigot
> Norwich
> Norfolk
> NR14 7PZ
> Company Limited by Guarantee  Registered in England and Wales No. 4098341
> Registered Charity No. 1084108
> Registered VAT No. 927 9604 86
>
> Please note this email is sent via an unsecure system and there may be a
> small risk that information may be intercepted.
> The information contained in this email is intended only for the person or
> organisation to which it is addressed. If you have received it by mistake,
> please disregard and notify the sender immediately. Unauthorised disclosure
> or use of such information may be a breach of legislation or
> confidentiality and may be legally privileged.
> Emails sent from and received by volunteers and employees of Equal Lives
> may be monitored.
> Unless this email relates to Equal Lives business it will be regarded by
> Equal Lives as personal and will not be authorised by or sent on behalf of
> Equal Lives. The sender will have sole responsibility for any legal actions
> or disputes that may arise.
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> Enterprise mailing list
> Enterprise at kde.org
> https://mail.kde.org/mailman/listinfo/enterprise
>
>
> ------------------------------
>
> End of Enterprise Digest, Vol 16, Issue 7
> *****************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/enterprise/attachments/20180130/819e3148/attachment-0001.html>