[17:26] <pyperdown> is there an equivilent to the "User Policy Editor" (sabayon + pessulus) in 12.04 LTS?  How does one lock down the desktop?
[17:38] <pyperdown_> is there an equivilent to the "User Policy Editor" (sabayon + pessulus) in 12.04 LTS?  How does one lock down the desktop?
[17:47] <stgraber> pyperdown_: from the 11.10 release notes "Unfortunately, due to Gnome upstream transitioning to gsettings and gtk3, we weren't able to include Gnome Nanny, Sabayon and Pessulus in this release."
[17:47] <stgraber> pyperdown_: I think we had a look during the 12.04 cycle and the gnome project didn't update them yet
[17:48] <stgraber> you can do some manual overrides using the gsettings schema overrides in /usr/share/glib-2.0/ (default settings, not mandatory settings)
[17:48] <stgraber> and some more with dconf in /etc (haven't tried these yet)
[17:53] <pyperdown_> Bummer - Myself and a colleague at another school district are struggling with this.  In the real world kids (and adults) will do things like turn networking off and screw with system settings, which turns into support issues.
[17:54] <pyperdown_> I may be looking at Mint or Debian instead.  Kinda surprised in a way though.  Not very "enterprise"
[17:54] <stgraber> well, gnome upstream decided to deprecate gconf and broke all the lock down tools in the process
[17:55] <pyperdown_> "excellent"
[17:55] <stgraber> so unless you switched to something that's not based on gnome 3.x you'll get that problem on any distro you look at
[17:57] <stgraber> Debian actually removed sabayon and pessulus from their package archive (squeeze being the last release to still have them)
[17:57] <pyperdown_> Any opinion on Mate?  Cinnamon? (relative to policy enforcement)
[17:58] <stgraber> Cinnamon is just a gnome 3.x shell, so it won't be any better (as it also uses dconf)
[17:59] <pyperdown_> That's what I thought.
[17:59] <stgraber> mate is supposedly a fork of gnome 2.x, so if they actually forked it before the switch from gconf to dconf and they actually maintain all the old versions of all the packages, it may work
[17:59] <stgraber> but my guess is that they just maintain a fork of the biggest UI bits, anything else will use dconf and won't work with the old lockdown tools
[18:00] <stgraber> we really need someone to write a new lockdown tool using dconf/gsettings, once someone does that, Edubuntu will certainly include it by default. With our current projects and limited manpower, we won't be able to develop that ourself
[18:04] <alkisg> (08:53:06 μμ) pyperdown_: Bummer - Myself and a colleague at another school district are struggling with this.  In the real world kids (and adults) will do things like turn networking off and screw with system settings, which turns into support issues. ==> why you give them admin rights?
[18:04] <alkisg> How would a user without admin rights mess up system settings?
[18:17] <pyperdown_> I will give it a shot but it is sounding like I may want to stick with 10.04 and wait for the tools to catch up.
=== SirRemoz is now known as Sir_Remoz
[18:17] <pyperdown_> We have to give them rights on interfaces, esp for wireless
[18:18] <pyperdown_> Unless of course I'm missing something (And I hope I am)
[18:18] <pyperdown_> But we do NOT give them admin rights on anything else.  No sudoer privs.
[18:19] <stgraber> well, the network management stuff is now system wide by default
[18:19] <stgraber> though I believe you can grant access to a separate group just to the Network Manager API with policykit
[18:21] <stgraber> pyperdown_: something like: http://paste.ubuntu.com/992806/ dumped into /etc/polkit-1/localauthority.conf.d might do the trick (haven't tried it)
[18:21] <stgraber> that way you just need your users in the network group but not in the admin group
[18:26] <pyperdown_> I will try that.  Thanks very much.  Is "policykit" a package or part of the core?
[18:26] <pyperdown_> Also, my colleague in Texas is looking for a way to lock down the http/https proxy setting - any thoughts on that?
[18:33] <pyperdown_> stgraber:  Hey we've worked together before I think - I'm at Standard School District in Bakersfield - you folks did a Zimbra implementation for us, assuming you work for RLX...
[18:39] <stgraber> pyperdown_: I used to work for RLNX until a bit over a year ago when I moved to Canonical, but yeah I indeed remember the Zimbra install RLNX did for you :)
[18:42] <pyperdown_> I though I recognized your nick...  :)
[18:42] <highvoltage> small world :)
[18:42] <pyperdown_> absolutely!
[18:46] <pyperdown_> RLX's loss, Canonical's gain :)
[18:47] <highvoltage> heh
[18:47] <highvoltage> yeah indeed.
[18:54] <bencer> hi all
[19:25] <highvoltage> hi bencer
[19:33] <pyperdown_> howdy
[19:54] <highvoltage> howdy pyperdown_
[19:54] <highvoltage> how are you all today?
[20:09] <pyperdown_> fightin' the good fight ;)
[20:43] <pyperdown_> Huntin' for netgroup-based desktop policy
[20:44] <highvoltage> sounds almost like a folk-song :)
[20:49] <pyperdown_> lookin' to killit 'n grillit, metaphorically