After two years of working with KDE, we think it is now time to share the results of our efforts to create a restricted KDE as part of our Linux-based thin client project that is now nearing completion. A write-up of our design and strategy is available as well as the patches that we used to customize KDE to our needs.
In a restricted desktop (kiosk-mode), the goal is to prevent the user from:
- opening a shell,
- running arbitrary commands,
- modifying files directly, or,
- having a view to the filesystem.
the user can:
- run applications provided by the administrators, and,
- configure the desktop to a certain degree.
KDE provides some functionality to achieve a part of this
(configuration files, environment variables, and alike).
There are certain requirements however, that can only be met by modifying
the KDE sources. The patches can be found here. Read the details and
further instructions in
the KDE Kiosk Mode
HOWTO that will also be submitted to the Linux Documentation Project.
It is our hope, that the idea of a restricted desktop will be merged into
KDE 3.0 as we know that there exists a kiosk patch for konqueror as
well. It is our belief that this is just the thing admins need in a