I need to remove the "Browse Network" button in Nautilus menu in Ubuntu 11.10,

Asked by Mark Pirie

I am a School administrator flying the flag for Ubuntu in a small school, we have a windows network and Ubuntu 11.10 systems. The kids can browse some of the read/write shares on the active directory server (these need to stay read/write)- this is a security problem and I need to remove the "Browse Network" button in Nautilus menu to stop this activity. If I right click the browse network icon it has a greyed out inaccessible menu to get rid of the icon. Just for info I am using Winbind and Likewise-open to get me onto the windows domain and use .profile scripts to create the shortcuts to the relevant user shares. Please can anyone help?

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu nautilus Edit question
Assignee:
No assignee Edit question
Solved by:
Mark Pirie
Solved:
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :
#1

Do the systems need to access network shares at all?

Revision history for this message
Mark Pirie (prac2011) said :
#2

Hello,
 Yes they need to so that they can save their work to the windows network share. The network shares are mounted using smbclient (i believe) the shortcuts are of the form: smb://servername/username$/. You will find similar setups in most schools - they love windows! The students use their windows accounts (active directory) to access the Ubuntu machines.
 I tried hacking the code in the /usr/bin/nautilus script but this seems like a step too far, i just need to lose the browse network icon to protect shares for resources that have to be set read/write to work with Windows.

Regards

Mark

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#3

Could submit a bug and/or feature request at:
http://brainstorm.ubuntu.com

Not sure otherwise, maybe others can advise, maybe a different file browser can be used.

Revision history for this message
Mark Pirie (prac2011) said :
#4

Was hoping to retain the default Nautilus package due to time constraints but, will have a look at Marlin, Thunar etc to see if they're any better, thanks for taking a look into it..

Mark

Revision history for this message
Mark Pirie (prac2011) said :
#5

I have found a solution myself, the executable that browses the samba shares when the Nautilus icon is clicked is as follows:

/usr/lib/gvfs/gvfsd-smb-browse

The Permissions are 755 (executable by all) they need to be changed to executable by root only and not anyone else so I changed the permissions to 744 :

Run the command as root user:

chmod 744 /usr/lib/gvfs/gvfsd-smb-browse

When you attempt to look at the shares as a normal user now you get an error message saying you don't have permissions to do so - job done!!

Guess this problem is closed now..

Mark

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#6

Great share! Hopefully this will help others with the same issue
=D