[Kde-kiosk] [Bug 113969] New: kolourpaint can change wallpaper with locked down desktop

[Clarence Dang]

On Thursday 06 October 2005 23:56, Martin Woolley wrote:
> http://bugs.kde.org/show_bug.cgi?id=113969
[...]
> Version:            (using KDE KDE 3.4.0)
>
> In /usr/share/config/kdesktoprc we set-up :
>
> [Background Common]
> CommonDesktop[$i]=true
>
> [Desktop0][$i]
> Wallpaper=/usr/share/backgrounds/images/default.png
>
> to make the wallpaper immutable.
>
> Users are still able to change their wallpaper: KolourPaint includes
> options on the file menu to save an image as the wallpaper.
>
> If the users logoff and logon again, their wallpaper has reverted to that
> set in /usr/share/config/kdesktoprc however we expect users to not be able
> to change their wallpaper at all if the desktop has been locked down.

I think this might be a kdesktop issue rather than KolourPaint.

If the security policy was only enforced in KolourPaint, someone could easily 
recompile KolourPaint with the security policy taken out.

Having said that, if it was enforced in kdesktop, there is nothing stopping a 
user from compiling their own personal version of kdesktop either...

Anyway, enforcing security policy at user level has always seemed mysterious 
to me.

kde-kiosk, what do you think?

Thanks,
Clarence