I'm a Linux sysadmin and I maintain 100 Ubuntu desktops. We're about to upgrade to 12.04, but before we can do that we have to make Ubuntu PCI complaint. Meaning we have to lock some mandatory settings from the users. I've done all of the settings except the following.
The last PCI settings:
- Users may not change their screen saver timeout, it has to be set to 5 minutes. And locked so that no configuration can be made by the user.
- Users must always unlock their screen when the automatic screen saver is enabled and a keystroke or mouse movement is initiated by the user. This setting must be locked as well.
I also want to push default LibreOffice settings e.g. the hardware acceleration in LO is breaking the full screen presentation option in Impress. So disabling that is important.
On Ubuntu 11.04 I could do this by adding the configuration below in /etc/gconf/gconf.xml.mandatory/. But that doesn't work anymore for the screen saver in 12.04.
I would like to know how I can make these settings mandatory in an easy way. This must also work for new machines as well, so copying profiles is not a solution.
<gconf>
<dir name="desktop">
<dir name="gnome">
<dir name="session">
<entry name="idle_delay" mtime="1292927092" type="int" value="5"/>
</dir>
</dir>
</dir>
<dir name="apps">
<dir name="gnome-screensaver">
<entry name="idle_activation_enabled" mtime="1300290816" type="bool" value="true"/>
<entry name="lock_enabled" mtime="1300290814" type="bool" value="true"/>
</dir>
</dir>
<dir name="gnome-power-manager">
<dir name="lock">
<entry name="use_screensaver_settings" mtime="1300291577" type="bool" value="true"/>
</dir>
</dir>
</gconf>
