17 Nov
2008
17 Nov
'08
5:41 p.m.
On Nov 17, 2008, at 8:19 AM, Stan wrote:
Sorry my previous question about kiosk mode was misleading. We already have a kiosk mode (the window manager is configured to only allow the browser). I was asking what would be the best way to limit users to one directory in the Inkscape dialog boxes. We don't want them to be able to browse the file system.
That does sound like it is solved by SELinux.
The security feature you want is really an OS-level one, not an application level one. From a security viewpoint, it is very bad to count on an application policing itself, and much better to have the OS configured to provide and enforce the lock-outs you want.