#Debian kiosk mode install#
#Debian kiosk mode Bluetooth#
#Debian kiosk mode tv#

One thing that I came across working with the xguest is the Gnome initial setup runs every time the Guest account logs in. They can save files, create documents and send them via email, etc. The Guest user can now surf the internet, log into their email, and basically do anything within Firefox. You will see a user named 'Guest' on your GDM login screen. There is no configuration necessary once the package is installed.

#Debian kiosk mode Bluetooth#

xguest_use_bluetooth - Allow xguest to use bluetooth devices.

xguest_exec_content - Allow xguest to execute files in their home directory and tmp.

xguest_connect_network - Allow xguest to confgure Network Manager, connect to wifi, etc.

xguest_mount_media - Allows guest to mount removable media.

For a complete list of booleans and allowed tcp ports see the man page in the resources and links section below. Here are some of the more popular booleans.

There are several pre-defined booleans to allow flexibility for the xguest account.

#Debian kiosk mode install#

Installing xguest with yum (CentOS 7 / Red Hat 7) sudo yum install xguest Installing xguest with dnf (Red Hat 8, CentOS 8, Fedora) sudo dnf install xguest Available Booleans for xguest Account You can easily install the xguest package using yum or dnf package managers. Gnome is the default display manager for Red Hat, CentOS, Fedora and most other Red Hat variants. In addition, you must be using the Gnome Display Manager. As far as I can tell, the xguest package is not available on Ubuntu.

The package is available to all three of these systems. This was tested on Red Hat 8, CentOS 7 and Fedora 31. The SELinux policy can be changed (and booleans set) to further restrict or expand the users permissions. The xguest user account was designed as a least privilege account for use on kiosks and other open systems that require a graphical interface. This means that when the xguest user logs off, or the system rebooted, anything created by the user is gone (cookies, files, cache, etc.). Xguest generates a temporary file system when the Guest account logs in, and it's destroyed when they log out. Also, nothing is saved past the current session. The SELinux policy also restricts a lot of network ports (like SSH connections) but allows most local applications to run. The user is very restricted and can basically log in and use a browser to access the internet. It uses this policy to control the user's access.

The xguest package creates a Guest account with a special SELinux (Security Enhanced Linux) policy. This is when I happened upon the xguest package. Preferably, an account that does not save anything, cannot install anything and leaves no trace of the person when they log out. So I started looking for a way to allow guest access to my system. Because of this traffic, people often want to use my computer.

#Debian kiosk mode tv#

It is also a place where the family relaxes and watches TV at night. This makes it a popular room for my teenager and her friends. The den also has a soft comfy couch, fireplace, and a large TV.

My home office is actually just a desk in the den.