I am building some kiosks, running ubuntu, that will host an intranet site. What is the best way to allow access only to an Internet browser, and no other applications?
I'd guess a relatively efficient way (depending on the number of machines, this is only useful if you're setting up 10+ I'd guess) would be to do the same custom-install on all of the machines with only Firefox or Chromium installed by default:
Start-up disabling on a guest account
You could set a script on system start-up that disables all applications without having the
In the custom install you won't need to worry about creating accounts as all accounts will need your sudo password to do things other than access the internet. However if you want to modify the install it will make things more of a pain as you'll have to re-enable everything using the terminal and your
One way to do that is to open a terminal and run a few commands. First you want a "guest" user. To make our user you do: sudo adduser guest
add any information that would be applicable in the terminal. Then what you want to do is a chmod to change the security of the drive. sudo chmod o=wx /
o=other than root wx=write and execute. The guest user needs to be able to execute files in order to login. They will not be able to view any of the system files though. You can then add the web browser to the desktop then remove the menu bar by right clicking on it then hitting remove.
That should work.