Blame SOURCES/0001-schemas-add-new-lockdown-setting-for-password-showin.patch

ba5e2e
From 7c0887c5a50434aa000f0db538382613f0944ac2 Mon Sep 17 00:00:00 2001
ba5e2e
From: Ray Strode <rstrode@redhat.com>
ba5e2e
Date: Wed, 21 Aug 2019 13:41:08 -0400
ba5e2e
Subject: [PATCH] schemas: add new lockdown setting for password showing
ba5e2e
ba5e2e
A convenient feature of many password entries is the
ba5e2e
"Show Password" menu that lets the user see what password
ba5e2e
is hidden behind the bullets they're typing.
ba5e2e
ba5e2e
While certainly useful, it can also be problematic in some
ba5e2e
deployments, and violate security policies.
ba5e2e
ba5e2e
This commit adds a new setting to rid users of that "Show Password"
ba5e2e
menu item.
ba5e2e
---
ba5e2e
 schemas/org.gnome.desktop.lockdown.gschema.xml.in | 7 +++++++
ba5e2e
 1 file changed, 7 insertions(+)
ba5e2e
ba5e2e
diff --git a/schemas/org.gnome.desktop.lockdown.gschema.xml.in b/schemas/org.gnome.desktop.lockdown.gschema.xml.in
ba5e2e
index 0150b32..b8020d1 100644
ba5e2e
--- a/schemas/org.gnome.desktop.lockdown.gschema.xml.in
ba5e2e
+++ b/schemas/org.gnome.desktop.lockdown.gschema.xml.in
ba5e2e
@@ -44,32 +44,39 @@
ba5e2e
     </key>
ba5e2e
     <key name="disable-lock-screen" type="b">
ba5e2e
       <default>false</default>
ba5e2e
       <summary>Disable lock screen</summary>
ba5e2e
       <description>
ba5e2e
         Prevent the user to lock his screen.
ba5e2e
       </description>
ba5e2e
     </key>
ba5e2e
     <key name="disable-application-handlers" type="b">
ba5e2e
       <default>false</default>
ba5e2e
       <summary>Disable URL and MIME type handlers</summary>
ba5e2e
       <description>
ba5e2e
         Prevent running any URL or MIME type handler applications.
ba5e2e
       </description>
ba5e2e
     </key>
ba5e2e
     <key name="disable-log-out" type="b">
ba5e2e
       <default>false</default>
ba5e2e
       <summary>Disable log out</summary>
ba5e2e
       <description>
ba5e2e
         Prevent the user from logging out.
ba5e2e
       </description>
ba5e2e
     </key>
ba5e2e
     <key name="user-administration-disabled" type="b">
ba5e2e
       <default>false</default>
ba5e2e
       <summary>Disable user administration</summary>
ba5e2e
       <description>
ba5e2e
         Stop the user from modifying user accounts. By default, we allow adding
ba5e2e
         and removing users, as well as changing other users settings.
ba5e2e
       </description>
ba5e2e
     </key>
ba5e2e
+    <key name="disable-show-password" type="b">
ba5e2e
+      <default>false</default>
ba5e2e
+      <summary>Disable password showing</summary>
ba5e2e
+      <description>
ba5e2e
+        Disable the "Show Password" menu item in password entries.
ba5e2e
+      </description>
ba5e2e
+    </key>
ba5e2e
   </schema>
ba5e2e
 </schemalist>
ba5e2e
-- 
ba5e2e
2.21.0
ba5e2e