-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/12/2011 12:16 AM, Bruno Wolff III wrote: > On Thu, Aug 11, 2011 at 22:57:18 -0500, Manuel Escudero > <Jmlevick@xxxxxxxxx> wrote: >> >> I want to set a standard configuration in a machine and then let >> that machine to be used by many users, but as soon as the user Log >> Out (preferably in that moment) I want the machine to undo all the >> possible changes the user may have done while he/she was using it. > > xguest might do what you want. Description : Installing this package > sets up the xguest user to be used as a temporary account to switch > to or as a kiosk user account. The account is disabled unless SELinux > is in enforcing mode. The user is only allowed to log in via gdm. The > home and temporary directories of the user will be polyinstantiated > and mounted on tmpfs. I would actually look at what xguest is doing to achieve this. The main feature is to setup pam_namespace for ~/ and /tmp, /var/tmp You may or may not want to use SELinux to prevent them from attempting to do evil, I would recommend you set these users as xguest_u if they are logging in via X, or guest_u if they are only having terminal access. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk5FFtEACgkQrlYvE4MpobOkvwCfYquD2KScM+Fj9ru4NocBvm60 +1QAn26wHKW1IEMljwzAP612yhLgqlG3 =n4t2 -----END PGP SIGNATURE----- -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
