<?xml version="1.0" encoding="utf-8"?>
<page xmlns="http://projectmallard.org/1.0/" xmlns:its="http://www.w3.org/2005/11/its" type="topic" style="task" id="lockdown-logout" xml:lang="eu">

  <info>
    <link type="guide" xref="user-settings#lockdown"/>
    <link type="seealso" xref="dconf-lockdown"/>
    <revision pkgversion="3.30" date="2019-02-08" status="review"/>

    <credit type="author copyright">
      <name>Jana Svarova</name>
      <email>jana.svarova@gmail.com</email>
      <years>2015</years>
    </credit>
    <credit type="editor">
      <name>Petr Kovar</name>
      <email>pknbe@volny.cz</email>
      <years>2019</years>
    </credit>

    <include xmlns="http://www.w3.org/2001/XInclude" href="legal.xml"/>

    <desc>Prevent the user from logging out and from switching a user.</desc>
  </info>

  <title>Disable user logout and user switching</title>

  <p>Preventing the user from logging out is useful for special kind of GNOME
  deployments (unmanned kiosks, public internet access terminals, and so on).</p>

  <note style="important">
  <p>Users can evade the logout lockdown by switching to a different user. That
  is the reason why it is recommended to also disable <em>user switching</em>
  when configuring the system.</p>
  </note>

  <steps>
  <title>Disable user logout and user switching</title>
  <include xmlns="http://www.w3.org/2001/XInclude" href="dconf-snippets.xml" xpointer="xpointer(/*/*[@xml:id='dconf-profile-user'])"/>
  <include xmlns="http://www.w3.org/2001/XInclude" href="dconf-snippets.xml" xpointer="xpointer(/*/*[@xml:id='dconf-profile-user-dir'])"/>
  <item>
  <p>Create the key file <file>/etc/dconf/db/local.d/00-logout</file> to provide
  information for the <sys>local</sys> database:</p>
<screen>
[org/gnome/desktop/lockdown]
# Prevent the user from logging out
disable-log-out=true

# Prevent the user from user switching
disable-user-switching=true
</screen>
  </item>
  <item>
  <p>Override the user's setting and prevent the user from changing it in
  <file>/etc/dconf/db/local.d/locks/lockdown</file>:</p>
<screen>
# Lock user logout
/org/gnome/desktop/lockdown/disable-log-out

# Lock user switching
/org/gnome/desktop/lockdown/disable-user-switching
</screen>
  </item>
  <include xmlns="http://www.w3.org/2001/XInclude" href="dconf-snippets.xml" xpointer="xpointer(/*/*[@xml:id='dconf-update'])"/>
  <item>
  <p>Restart the system for the system-wide settings to take effect.</p>
  </item>
  </steps>

</page>