R9.2/gnome.desktop 40.10 gui:
I am aware of setting donf locks for individual dconf settings via /etc/dconf/db/local.d/locks/. However, I would prefer to lock out dconf access to root and/or sudo users only. Am I wasting my time? Should I just use the donf locks and list everything? Thank you.
edit: im thinking that this root/sudo only would defeat the per-user purpose of dconf, so probably not possible (?)
Q: What does ‘dconf’ do for a user?
A: Affects settings that are stored in the home directory of the user.
Q: Could one modify those config files with some other application (e.g. vim)?
A: I don’t know. Lets assume yes.
Conclusion: If there is any way for user to create a config file that overrides system-wide settings, then removal of one way to create those files is not enough; locks to prevent overrides are necessary.