I'm trying to make a safe workstation PC for sensitive data using Ubuntu 14.04.

No user should have the right to: print, connect a USB flash drive to transfer files, send files via email or install new softwares.

I'd like the restricted user to only be able to read files and not transfer them in any way possible.

Thanks for any help.


Do this:

sudo apt-get install gnome-system-tools

Then you have an interface to add users :

enter image description here

Whit many options :

enter image description here


This may help: https://stackoverflow.com/questions/527876/how-to-restrict-a-linux-user-to-be-only-able-to-read-home-user-and-nothing-else

"Usually it's enough to make sure they can't mess with the home directories of other users. To do this, put the user into a new group (like "untrusted"), chown his home directory and revoke the group and other rights on all home directories: chmod go-rwx /home/*/"

  • 2
    The link you gave 404's – bmintz Dec 5 '17 at 5:34
  • Unfortunately it does now. The article was deleted on stackoverflow because it was off-topic, despite being very useful. When you get 10k rep on stackoverflow, you too will finally have a complete view of the web, because you can see deleted questions. – Ross Rogers Dec 26 '18 at 3:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.