Starting libvirtd.service provides iptable rules for NATed network virbr0.
When starting firewalld.service after libvirtd, these rules will be
overwritten. So NAT will no longer work. Restart of libvirtd fixes the
rules again.
When terminating screen lock, pam_exec is called in the context of the corresponding user.
Non-root users don't have the permission to start/stop firewalld. So exit immediately.
Existing dolphin configs can be incorrect for two reasons:
- Instead of the class identifier, a * was incorrectly entered in the home@server URL.
- If the student has changed classes, the old class name is still in the home URL.
lmn-patch-dolphin.sh no longer enters a * in the home@server URL.
lmn-fixhome-dolphin.sh will fix existing configs.
- Wifi-devices will be managed by NetworkManager
- (USB-)Dockingstation with same MAC as internal device
will be assigned to virbr1
- users with role-teacher have privilege
- to create new NetworkManager connections
- install additional software
- change luks-key
- package plasma-discover will not be removed (for teacherlaptops)
- http-proxy-Settings will be configured by auto-detect
- providing sudo-script to mount default-school from server after
wireguard-connection is established
- user-home is on local disk
- additional entry in dolphin: home@server
- display info about localhome on login-screen
- provide unison-config for sync home with home@server
- force user to be logged out immediately after first login, because
home-dir must exists for bind-mounts on /lmn/media
