fix: a notification's Configure button no longer opens system settings

Browse Source

The kernel memory killer's "Memory Shortage Avoided" notice carried a
Configure button that ran kcmshell6 and opened KDE's whole Notifications
settings under the teacher's account. Reproduced in the lab.

Plasma draws that button without consulting the Kiosk policy, but
kcmshell6 and System Settings do: every settings module Debian 13's
Plasma 6.3 installs (90) is now refused in the classroom's immutable
kdeglobals, so the same click shows only "disabled by the system
administrator". The clock's Configure Digital Clock goes with
plasma/allow_configure_when_locked=false; Configure Audio Devices
disappears on its own; the disabled window's Help button opened KDE Help
Center, which the package now conflicts with (plasma-desktop only
recommends it).

The maintenance terminal runs outside the classroom's configuration and
still opens every module, verified. converged-check fails if any module
on a machine is ever left unrestricted: 126 passed in the lab.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

...

This commit is contained in:

ekklesia

2026-09-24 06:59:53 -05:00

co-authored by Claude Opus 5.5

parent 3855989029

commit cd798a33a1

9 changed files with 194 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/screenshots/maintenance-kcm.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 1.3 MiB

docs/screenshots/notif-cog-opened.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 1.4 MiB

docs/screenshots/notif-restricted-click.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 1.7 MiB

docs/screenshots/rmb-clock-locked.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 1.7 MiB