Blob Blame History Raw
From 7c0887c5a50434aa000f0db538382613f0944ac2 Mon Sep 17 00:00:00 2001
From: Ray Strode <rstrode@redhat.com>
Date: Wed, 21 Aug 2019 13:41:08 -0400
Subject: [PATCH] schemas: add new lockdown setting for password showing

A convenient feature of many password entries is the
"Show Password" menu that lets the user see what password
is hidden behind the bullets they're typing.

While certainly useful, it can also be problematic in some
deployments, and violate security policies.

This commit adds a new setting to rid users of that "Show Password"
menu item.
---
 schemas/org.gnome.desktop.lockdown.gschema.xml.in | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/schemas/org.gnome.desktop.lockdown.gschema.xml.in b/schemas/org.gnome.desktop.lockdown.gschema.xml.in
index 0150b32..b8020d1 100644
--- a/schemas/org.gnome.desktop.lockdown.gschema.xml.in
+++ b/schemas/org.gnome.desktop.lockdown.gschema.xml.in
@@ -44,32 +44,39 @@
     </key>
     <key name="disable-lock-screen" type="b">
       <default>false</default>
       <summary>Disable lock screen</summary>
       <description>
         Prevent the user to lock his screen.
       </description>
     </key>
     <key name="disable-application-handlers" type="b">
       <default>false</default>
       <summary>Disable URL and MIME type handlers</summary>
       <description>
         Prevent running any URL or MIME type handler applications.
       </description>
     </key>
     <key name="disable-log-out" type="b">
       <default>false</default>
       <summary>Disable log out</summary>
       <description>
         Prevent the user from logging out.
       </description>
     </key>
     <key name="user-administration-disabled" type="b">
       <default>false</default>
       <summary>Disable user administration</summary>
       <description>
         Stop the user from modifying user accounts. By default, we allow adding
         and removing users, as well as changing other users settings.
       </description>
     </key>
+    <key name="disable-show-password" type="b">
+      <default>false</default>
+      <summary>Disable password showing</summary>
+      <description>
+        Disable the "Show Password" menu item in password entries.
+      </description>
+    </key>
   </schema>
 </schemalist>
-- 
2.21.0