Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I'm administering a system and do not want people messing with their system settings (specifically the power settings).

I've searched everywhere and cannot find a method for disabling the power settings from system settings.

The gnome-system-tools package didn't contain any options for restricting access to system settings or power settings.

Using Raring Ringtail.

share|improve this question
    
I would assume that the ability for non-privileged users to modify system settings is granted by policykit actions, but I am not certain this applies to things like power settings. –  neon_overload Jun 13 '13 at 10:30

3 Answers 3

up vote 5 down vote accepted

Changing permissions to 700 for /usr/bin/gnome-control-center would help you restrict the normal users gain access.
However that goes out for all the settings, and users wont be able to set other settings like the display or keyboard.

Another good way is to define user group and change the ownership of gnome-control-center to those groups. and then add the permissible user to the group. the full description is here.

We have done is created groups with certain admin privileges and managed centrally using/etc/sudoers where in entries are whitelisted and provided on need basis.
For example:
Including the line :

$admin=ALL=(ALL) ALL `!/usr/bin/gnome-control-center`
share|improve this answer
1  
Note that clever users will still be able to use other tools to change their settings. With gsettings, for example. If you restrict access to that, then users will be able to do what gsettings does, ad infinitum. So this method does work, but only for users who don't know how to get around it. –  Robie Basak Jun 13 '13 at 11:24
    
@RobieBasak That is absolutely correct, however here we are trying to avoid users making stupid mistakes. Anyone with an intent will surely be able to change what he wants. –  karan Jun 13 '13 at 11:29

Gnome Control Center loads all of the applets that have .desktop files in /usr/share/applications. It does not complain if some applets are missing.

Once you have the settings you need in place, the easiest way to keep the applet from showing in the Control Center is to just rename the corresponding .desktop file.

sudo mv /usr/share/applications/gnome-power-panel.desktop /usr/share/applications/gnome-power-panel.desktop.original

This will also prevent users from running the applet in isolation since the renamed file will not show up in Dash searches.

share|improve this answer
    
I get a file not found. Where is gnome-power-panel located? –  Kevin Duke Jun 13 '13 at 19:07
1  
@kevin-duke Sorry, I had mentioned the location /usr/share/applications above, but since I normally cd to a folder before running these kind of commands, I forgot to include it in the command. I added it to the answer. –  chaskes Jun 13 '13 at 19:18

You could install

ninja

and there configure a "blacklist", which programs should be not for general use.

share|improve this answer
    
This seems really inefficient for such a simple task even windows 2000 has. Is there really no other way? –  Kevin Duke Jun 13 '13 at 10:10
    
Why voting me down ?! I am NOT kidding you ! ninja is a full-featured Linux tool ! Nothing to do with Windows. You can read more here: blog.bodhizazen.net/linux/how-to-ninja-ubuntu-10-04 –  dschinn1001 Jun 13 '13 at 13:14

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.