Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I'm using Ubuntu 10.04. I would like to create a new account, for other people using my computer. I would like my guest to have access to Internet, text editor and other application installed on my computer without having access to my data (and obviously system settings).

I have added a user "guest" using graphic interface (System -> Administration -> Users and groups). My guest has now access to the application, but not full - wine and VirtualBox are empty (wine has only wine notepad, on VirtualBox there is no virtual machine installed). Internet and chat are fine, but "guest" has the access to anything in the computer via terminal, and I would like to keep him in his guests home (there are a lot of people using my computer, not all of them I know well).

I have found on http://www.ubuntu.pl/ how to change user's privileges via terminal and I'm wondering if the command chmod -vR --preserve-root 700 /home/maria is fine?

/home has two directories: guest and maria.

And how to ensure for my guest the access to applications installed on wine and VirtualBox without installing it once again?

This is an output for guests groups:

guest@marysia-ubuntu:~$ groups
guest adm dialout fax cdrom floppy tape dip video plugdev fuse nopasswdlogin
guest@marysia-ubuntu:~$

And this for marias groups:

maria@marysia-ubuntu:~$ groups
maria adm dialout cdrom plugdev lpadmin admin sambashare guest
maria@marysia-ubuntu:~$
share|improve this question

1 Answer 1

up vote 4 down vote accepted

If you're only worried about other users being able to see your files, run chmod -R o-rwx /home/maria. It revokes all permissions to the world (including guest).

guest does not belong to the admin group, which means he cannot run commands as other users (like root) through sudo (OK)

As noted by Takkat, anyone who has physical access to the machine could gain access to the files. The only way to protect you from that is encrypting the drive. If you put a BIOS password on the machine, the visitor can take out the HDD from it.

share|improve this answer
1  
But anybody could read your /home when booting from a live CD or USB. Encryption only is safe. –  Takkat Feb 26 '11 at 21:57
    
If you really do not trust your guest, you would not leave him alone in a chamber. I guess OP wants to prevent a quick look in her Home folder. –  Lekensteyn Feb 26 '11 at 22:11
    
@Lekensteyn: Thanks for chmod. But what about wine and VirtualBox applications? Is it possible to add it to guests account? –  maria Feb 26 '11 at 22:12
    
@Lekensteyn: yes, I don't have top secret data in my computer, I just prefere to be able to leave my computer to anybody who could need it and I've seen strange peoples behavior... –  maria Feb 26 '11 at 22:15
    
Well, VirtualBox saves it's settings and machines to ~/.VirtualBox, but do you really want to allow your guest to access those files? He could mess up your guests. It's better to create a custom VirtualBox guest for the guest account. The same goes for Wine. –  Lekensteyn Feb 26 '11 at 22:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.