mirror of
https://github.com/optim-enterprises-bv/secureblue.git
synced 2025-11-02 19:38:10 +00:00
feat: Disable user Gnome extensions & user-installation of them (#361)
This commit is contained in:
fiftydinar
8
FAQ.md
8
FAQ.md
@@ -67,6 +67,14 @@ If you still want to enable this functionality, run `ujust toggle-ghns`
|
||||
|
||||
Xwayland is disabled by default on GNOME, KDE Plasma, and Sway. Use `ujust toggle-xwayland` if you need it
|
||||
|
||||
#### Why I can't install any GNOME user extensions?
|
||||
|
||||
This is because support for installing them has been intentionally disabled in secureblue.
|
||||
Only system extensions are trusted, if they are installed.
|
||||
|
||||
To enable support for installing GNOME user extensions, you can run ujust command:
|
||||
`ujust toggle-gnome-extensions`
|
||||
|
||||
#### My clock is wrong and it's not getting automatically set. How do I fix this?
|
||||
|
||||
If your system time is off by an excessive amount due to rare conditions like a CMOS reset, your network will not connect. A one-time manual reset will fix this. This should never be required except under very rare circumstances.
|
||||
|
||||
5
files/gschema-overrides/zz1-secureblue.gschema.override
Normal file
5
files/gschema-overrides/zz1-secureblue.gschema.override
Normal file
@@ -0,0 +1,5 @@
|
||||
# Disable GNOME user extensions installation
|
||||
# Only GNOME system extensions are trusted if installed
|
||||
|
||||
[org.gnome.shell]
|
||||
allow-extension-installation=false
|
||||
@@ -203,6 +203,18 @@ toggle-gnome-jit-js:
|
||||
echo "JIT JavaScript for Gnome and WebkitGTK has been disabled."
|
||||
fi
|
||||
|
||||
# Toggle support for using GNOME user extensions
|
||||
toggle-gnome-extensions:
|
||||
#!/usr/bin/bash
|
||||
GSETTING="$(gsettings get org.gnome.shell allow-extension-installation)"
|
||||
if [[ "${GSETTING}" == "false" ]]; then
|
||||
gsettings set org.gnome.shell allow-extension-installation true
|
||||
echo "Support for GNOME user extensions have been enabled"
|
||||
else
|
||||
gsettings reset org.gnome.shell allow-extension-installation
|
||||
echo "Support for GNOME user extensions have been disabled"
|
||||
fi
|
||||
|
||||
# Toggle Xwayland support
|
||||
toggle-xwayland ACTION="prompt":
|
||||
#!/usr/bin/pkexec /usr/bin/bash
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -11,6 +11,7 @@ image-version: 40 # latest is also supported if you want new updates ASAP
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -11,6 +11,7 @@ image-version: 40 # latest is also supported if you want new updates ASAP
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
3
recipes/common/disable-gnome-extensions.yml
Normal file
3
recipes/common/disable-gnome-extensions.yml
Normal file
@@ -0,0 +1,3 @@
|
||||
type: gschema-overrides
|
||||
include:
|
||||
- zz1-secureblue.gschema.override
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/bluefin-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/bluefin-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/bluefin-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/bluefin-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/bluefin-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/bluefin-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -11,6 +11,7 @@ image-version: 40 # latest is also supported if you want new updates ASAP
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -11,6 +11,7 @@ image-version: 40 # latest is also supported if you want new updates ASAP
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/disableuserns-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/common-packages.yml
|
||||
|
||||
@@ -9,6 +9,7 @@ image-version: 40
|
||||
modules:
|
||||
- from-file: common/initialization-scripts.yml
|
||||
- from-file: common/gnome-packages.yml
|
||||
- from-file: common/disable-gnome-extensions.yml
|
||||
- from-file: common/silverblue-packages.yml
|
||||
- from-file: common/gui-packages.yml
|
||||
- from-file: common/disableuserns-packages.yml
|
||||
|
||||
Reference in New Issue
Block a user