<?xml version="1.0" encoding="utf-8"?>
<page xmlns="http://projectmallard.org/1.0/" xmlns:its="http://www.w3.org/2005/11/its" type="topic" style="task" id="lockdown-logout" lang="fa">

  <info>
    <link type="guide" xref="user-settings#lockdown"/>
    <link type="seealso" xref="dconf-lockdown"/>
    <revision pkgversion="3.30" date="2019-02-08" status="review"/>

    <credit type="author copyright">
      <name>یانا سواروا</name>
      <email>jana.svarova@gmail.com</email>
      <years>۲۰۱۵</years>
    </credit>
    <credit type="editor">
      <name>پیتر کوار</name>
      <email>pknbe@volny.cz</email>
      <years>۲۰۱۹</years>
    </credit>

    <license xmlns="http://projectmallard.org/1.0/" href="https://creativecommons.org/licenses/by-sa/3.0/">
  <p>This work is licensed under a <link href="https://creativecommons.org/licenses/by-sa/3.0/">Creative
  Commons Attribution-ShareAlike 3.0 Unported License</link>.</p>
</license>

    <desc>Prevent the user from logging out and from switching a user.</desc>
  </info>

  <title>Disable user logout and user switching</title>

  <p>Preventing the user from logging out is useful for special kind of GNOME
  deployments (unmanned kiosks, public internet access terminals, and so on).</p>

  <note style="important">
  <p>Users can evade the logout lockdown by switching to a different user. That
  is the reason why it is recommended to also disable <em>user switching</em>
  when configuring the system.</p>
  </note>

  <steps>
  <title>Disable user logout and user switching</title>
  <item xmlns="http://projectmallard.org/1.0/" xmlns:its="http://www.w3.org/2005/11/its" xml:id="dconf-profile-user">
    <p>Create the <file its:translate="no">user</file> profile which contains
    the following lines:</p>
    <listing its:translate="no">
      <title><file>/etc/dconf/profile/user</file></title>
      <code>user-db:user
system-db:local</code>
    </listing>
    <p><input its:translate="no">local</input> is the name of a
    <sys its:translate="no" xref="dconf">dconf</sys> database.</p>
  </item>
  <item xmlns="http://projectmallard.org/1.0/" xml:id="dconf-profile-user-dir">
    <p>Create the directory <file>/etc/dconf/db/local.d/</file>
    if it does not already exist.</p>
  </item>
  <item>
  <p>Create the key file <file>/etc/dconf/db/local.d/00-logout</file> to provide
  information for the <sys>local</sys> database:</p>
<screen>
[org/gnome/desktop/lockdown]
# Prevent the user from logging out
disable-log-out=true

# Prevent the user from user switching
disable-user-switching=true
</screen>
  </item>
  <item>
  <p>Override the user's setting and prevent the user from changing it in
  <file>/etc/dconf/db/local.d/locks/lockdown</file>:</p>
<screen>
# Lock user logout
/org/gnome/desktop/lockdown/disable-log-out

# Lock user switching
/org/gnome/desktop/lockdown/disable-user-switching
</screen>
  </item>
  <item xmlns="http://projectmallard.org/1.0/" xml:id="dconf-update">
    <p>Update the system databases:</p>
    <screen><output style="prompt"># </output><input>dconf update</input></screen>
  </item>
  <item>
  <p>Restart the system for the system-wide settings to take effect.</p>
  </item>
  </steps>

</page>
