[KLUG Members] Kiosk / Lightweight Workstation Recommendations

[Andrew Thompson]

> > And even after removing launchers from the 
> > panel(s) who knows if you "really" have everything locked down? Another 
> > big challenge here is blowing away the user directory after logout and 
> > recreating a clean user directory with the bare minimum dot config files 
> > et al.
> 
> rm -fR /home/tempuser
> cp -pR /home/skel /home/tempuser
> chown -R tempuser.nobody /home/tempuser
> 
> You can put it right in the GDM login script so that part runs as root.

If you do that, you might want to consider a cp from /root/skel instead
of /home/skel. That might reduce the chances of someone getting in and
mucking with the model user directory.

-- 
Andrew Thompson <tempes at ameritech.net>
The Imagerie