I want to configure XFCE that only root could start terminal and some other apps. First i removed the .desktop files from /usr/share/applications
which i don't need for the users.
Then i locked several properties in /etc/xdg/xfce4/xfconf/xfce-perchannel-xml
so the user could not change the Desktop menu anymore, locked some other settings, too.
But there is a simple way to start terminal or other applications i removed. If a user for example runs xfce-terminal.desktop from an USB-Stick or he
copies the file to the desktop the terminal could be started by clicking the icon.
How could i tell XFCE to start only the applications which are in /etc/xdg/xfce4/xfconf/xfce-perchannel-xml and lock all other.
I hope anybody could help me, thanks!
there are still some steps to a perfect XFCE system, maybe there are ideas around how these points could be managed.
1. disable running .desktop files by clicking on them (like locking .desktop files with KDE kiosk tool)
2. lock hidden files (the user should not be able to change this in thunar)
3. disable Root path for user, only $HOME should be shown (in thunar).