securing an internet kiosk

[ashrack]

Just did a fresh dapper install. And created 2 user account.
One with full priviligies which has a very strong password ofcourse. This account will be used for doing administrative tasks on this computer if something goes fubar.
ANd the other account which will be used for those using the computer. And this account has the following priviligies:
id tom
uid=1002(tom) gid=1002(tom) groups=1002(tom),24(cdrom),25(floppy),29(audio),46 (plugdev)

and so far it looks like this:
8952
As U might have noticed I changed the permission on the .Desktop folder so ppl can only execute those icons but they cant change or delete or create anything on the desktop.
But the thing that still bugs me is the home directory. Which they will still be able to change. How do I also secure that??

ps. gnome panels I've secured with "pessulus"

[ashrack]

anyone? How can I also secure the other hidden files in the user home dir so they will not be able to change it!!

[aysiu]

anyone? How can I also secure the other hidden files in the user home dir so they will not be able to change it!! Change ownership on them...?

[ashrack]

Change ownership on them...?
that was also my first thought. But I dont know which ones I can change? I mean arent there also files that would need to be modified in order for gnoem to function? Or is it safe to just change the ownership of all file under home dir??

[ashrack]

that was also my first thought. But I dont know which ones I can change? I mean arent there also files that would need to be modified in order for gnoem to function? Or is it safe to just change the ownership of all file under home dir??
anyone

[aysiu]

I think trial and error might be your best bet.
Create a new user and chown all the hidden folders (not the hidden files, though) and see if the new user can function.

[ashrack]

I think trial and error might be your best bet.
Create a new user and chown all the hidden folders (not the hidden files, though) and see if the new user can function.
crap! I thought there was an easier sollution:(

ps. What about this kind of method that some1 described to me, can it be achieved:
Originally Posted by IYY
You could just set it up so when a user logs out, his home directory gets restored to its original status (copied from some location in /usr/share/......). I think this is better than just locking access to config files, or at least it's what I'd prefer as a user.

[aysiu]

crap! I thought there was an easier sollution:(

ps. What about this kind of method that some1 described to me, can it be achieved: It can be achieved, but you'd have to write some kind of script to be executed at logout. The script would be easy to write. Getting it to execute at logout might be a bit more tricky.

[ashrack]

It can be achieved, but you'd have to write some kind of script to be executed at logout. The script would be easy to write. Getting it to execute at logout might be a bit more tricky.
the script I could probably manage. Theres a web site which teaches U of scripting. B
ut placing it at the GNOME LOG OUT now this could be tricky! Anyone has any ideas?

[ashrack]

anyone

[ashrack]

I should set it up so when a user STUDENT logs out, his home directory gets restored to its original status (copied from some location in /usr/share/......).

this is how I achieved this:
I tarred the STUDENT folder to /home/qhome.tar.gz. And chown it to TEACHER and gave executable permission to all.
So then I put this script into GNOME->SESSIONS->STARTUP PROGRAMS:
9278

tell me what do U think?