11.3. Locking Down Enabled Extensions

Procedure 11.3. Locking down enabled extensions

1. Create a local database file for machine-wide settings in /etc/dconf/db/local.d/00-extensions:

   [org/gnome/shell]
   # List all extensions that you want to have enabled for all users
   enabled-extensions=['myextension1@myname.example.com', 'myextension2@myname.example.com']
   # Disable access to Looking Glass
   development-tools=false
   

   The enabled-extensions key specifies the enabled extensions using the extensions' uuid (myextension1@myname.example.com and myextension2@myname.example.com).
   The development-tools key is set to false to disable access to Looking Glass.
2. Override the user's setting and prevent the user from changing it in /etc/dconf/db/local.d/locks/extensions:

   # Lock the list of mandatory extensions and access to Looking Glass
   /org/gnome/shell/enabled-extensions
   /org/gnome/shell/development-tools
   

3. Update the system databases:

   # dconf update

4. Users must log out and back in again before the system-wide settings take effect.