SOLVED: Need help setting up user restrictions/permissions at work

I am new to the Arch community in the last month after trying out the usual suspects in distributions. My only prior experience with Arch is setting up my tech machine with Linux and a few basic apps for customer backups. However, I have worked in IT for a while, it was just all Windows-based.
I want to use a spare machine we had laying around at our dog boarding/daycare facility as an employee time clock. More specifically, the time clock is web-based, so the computer only needs access to Firefox and LibreOffice and I would like to restrict it to their online system only. Also, I would like for it to print to the network Epson WorkForce 610 printer. I want the user account "employee" I created to be unable to load new software of any kind, change any settings, access a non-work website, etc. I figured I will maintain it, when necessary, using sudo.
Up to this point I have just loaded the basic install (32-bit), updated everything, and loaded the few extra things listed in the installation procedure such as sudo, gamin, samba, xorg, and some fonts. I have not yet loaded a desktop environment as I thought my specific needs may be easier with a certain one? I suppose I would prefer Xfce, as I have that on my tech machine, and it was simple enough for anyone to use at work for what I want. Besides that, I'm just going to load Firefox and LibreOffice, set up the network printer, and allow DVD-drive access for watching a training video and for viewing Word/Excel docs. I am hoping this is somewhat easily done, but if something is not possible that is okay. The 95% usage will be simply to punch in and punch out on the time clock online so as to keep the front computer free.
I am completely unaware in Linux how to accomplish this exactly and am not sure where to even look in the Wiki or forum search for this. I could have just loaded a fresh Windows XP Pro, but I am wanting to get deeper into the Linux community and become as familiar as I am with Windows.
Thanks for your help,
Vince
Last edited by vinceb (2011-04-14 18:44:35)

To sum it up, you want make your system immutable to the user after your setup and gain certain limit to network access?
1) To make your system immutable to certain user. The most simple way I can think of is to disable all terminal and launcher programs.
- Add "exit" to the bottom of ~/.bashrc file. Make it immutable.
# chattr +i ~/.bashrc
- Disable your launcher program. Asuming you're installing xfce4.
# chmod 700 $(which xfrun4)
- Mount /home folder with noexec option. Edit your /etc/fstab, for example:
/dev/sda4 /home ext4 defaults,noexec 0 1
You might also want to add this option for CDROM and USB sticks.
2) Limit your network access. The easiest way is to use some sort of firefox extension, however it is strictly a weak method to do so.
Many other methods's available.
However, I personally hate such thing and wouldn't recommend you to do so. If you truely wish to do it, please do it yourself.
And that's it. I'm out of here.

Similar Messages

[SOLVED] Need Help Understanding Warning on Directory Permissions

Hi guys-
In my last update I got these warnings:
warning: directory permissions differ on /usr/share/polkit-1/rules.d/
filesystem: 700 package: 755
warning: directory permissions differ on /var/lib/libvirt/qemu/
filesystem: 755 package: 770
I've seen quite a few threads floating around like these, but they just add to my confusion. I have not changed persmissions to these files. From what I've gathered so far from a few threads is that the package handler may have changed persmissions resulting in the warning messages. This is where my confusion sets in, and I don't know if it's from staring at the screen for too long, but if I cd into those directories and ls -l, there's the rules.d directory with 700:
/usr/share/polkit-1/:
total 8
drwxr-xr-x 2 root root 4096 Jun 14 10:39 actions
drwx------ 2 polkitd root 4096 Jun 16 18:31 rules.d
However, if I cd into rules.d, there's two files in there, both with 644 permissions:
total 8
-rw-r--r-- 1 root root 281 Jun 1 02:17 50-libvirt.rules
-rw-r--r-- 1 root root 488 May 12 17:11 gnome-control-center.rules
Where's the file with 755?
Same thing with the other wanring. There's qemu with 755. Libvirt is 755. The directory inside qemu is empty. Where's 770?
total 36
drwxr-xr-x 2 root root 4096 Mar 2 05:39 boot
drwxr-xr-x 2 root root 4096 Mar 2 05:39 dnsmasq
drwxr-xr-x 2 root root 4096 Mar 2 05:39 filesystems
drwxr-xr-x 2 root root 4096 Mar 2 05:39 images
drwxr-xr-x 3 root root 4096 Mar 2 05:39 lockd
drwxr-xr-x 2 root root 4096 Mar 2 05:39 lxc
drwxr-xr-x 2 root root 4096 Mar 2 05:39 network
drwxr-xr-x 2 root root 4096 May 10 19:05 qemu
drwxr-xr-x 2 root root 4096 Mar 2 05:39 uml
Can someone help me understand this please?
Last edited by w201 (2015-06-17 03:23:03)

The message does indeed mean that the package maintainer has changed the permissions on those directories. You can change your directories to match or leave them as-is. I always change mine when I get messages like this. To do that in this case, you'd run:
chmod 755 /usr/share/polkit-1/rules.d
chmod 770 /var/lib/libvirt/qemu
That will make your directories consistent with the new versions of the packages.

[SOLVED] Need help setting up cpufrequtils with Daemons.

Hello all. I'm running into this problem setting up power management tools on a Thinkpad T30. I've added acpi-cpufreq and cpufreq_ondemand to the rc.conf daemons but during boot I get the following errors.
/etc/rc.d/acpi-cpufreq: No such file or directory
/etc/rc.d/cpufreq_ondemand: No such file or directory
Last edited by philthy (2010-05-22 20:31:05)

philthy wrote:
evr wrote:acpi-cpufreq and cpufreq_ondemand are modules, they should be added in the modules section not the daemons section. cpufreq should be added to the daemons array.
Thanks for the reply. Lack of attention to detail on my part.
no worries, glad to help

[Solved] Need help setting up Xorg on a netbook

I am in the process of setting up a Arch install on my Netbook and having problems with setting up Xorg. My system has a VIA CX700/VX700 unichrome pro graphics card, I installed the xf86-video-openchrome driver and loaded it. When trying to use Xorg with auto detection it seems like the vsync is off. Here is the Xorg.0.log file that is created. When I ran Xorg -configure the xorg.conf file generated didn't list any possible resolutions other than 0x0.
Last edited by vendion (2010-10-30 04:25:31)

.:B:. wrote:How does it work without any xorg.conf?
What do you mean, sorry I don't quite understand your question? The reason I tried without a xorg.conf file is in hopes that xorg and udev, or hal although I think that was replaced in favor of udev in the recent Xorg update IIRC, will be able to correctly detect my hardware and generate sane settings by default, this method worked fine on my desktops, but something about ether the graphics card, as stated in my original post a VIA CX700/VX700 unichrome pro or the 10 inch screen is throwing Xorg off. When I tried running the Xorg -configure and test the xorg.conf file it generated it did the same thing. I don't necessarily have to have X11 working through autoconfig having a xorg.conf file does not bother me as long as I can get it working.

[SOLVED] Need help setting default boot device in bios

I have two harddrives S0 and S1 my windows partition is on S0 and my archlinux and grub is on S1. The problem is that I can't set the default boot device to S1 only S0. I have to F8 everytime I start up. Is there a way to set S1 as my default boot device. I tried searching this on google but I couldn't find any relevant posts
Thanks,
Shrub
Last edited by shrubuntu (2012-12-27 15:03:26)

DSpider wrote:
Hi and welcome to the forum.
I have never heard of the term "S0" and "S1" for drives. Perhaps you mean sda and sdb.
Go into the BIOS, choose your equivalent of "Hard disk priority", move the drive that you want to boot first above the rest of the others, and then exit by saving the settings (usually F10). That should do the trick. Alternatively, you could open up the case and move the SATA cables around, but be careful if you use "sdx" name conventions in /etc/fstab.
Thanks for the reply
I made up S0 and S1 for simplicity. sda and sdb makes more sense I suppose.
My BIOS does not recognize sdb in the priority menu, I'll try moving the SATA cables.

HOW TO?: Need help setting up 3 different iCloud accounts for my kids (so each has own iMessanger)using same Apple ID (mine) ....they don't have their own separate email addresses to work from...how do I do this?

Need help setting up 3 different iCloud accounts for my kids (so each has own iMessanger)using same Apple ID (mine) ....they don't have their own separate email addresses to work from...how do I do this?

Any devices connected to the same icloud account can sync all the data on that account. For this reason an icloud account is really for a single user.
On a mac, if each user has their own account, then the itunes for that mac account should be set up to connect to that user's icloud account (System preferences>icloud).

Need help setting up TV equiptment

I have been very ill and I need help setting up my TV, DVR, Receiver, Surround sound systems. I'm afraid if I try to work on all the equiptment, I'll drop my HDTV or other componets because I'm still weak. Can anyone help me? I've called a few places and they want $100.00 to set it up. Give me a break! I know about inputs and outputs and other cables, I just don't have the strength to move the equiptment around. I am willing to pay. Please call me at 813-{edited for privacy}. Thanks, Teresa {edited for privacy}

blondeinneed wrote:
I have been very ill and I need help setting up my TV, DVR, Receiver, Surround sound systems. I'm afraid if I try to work on all the equiptment, I'll drop my HDTV or other componets because I'm still weak. Can anyone help me? I've called a few places and they want $100.00 to set it up. Give me a break! I know about inputs and outputs and other cables, I just don't have the strength to move the equiptment around. I am willing to pay. Please call me at 813-{edited for privacy}. Thanks, Teresa {edited for privacy}
Teresa,
I think the best way for someone to volunteer to help you would be for them to send you a Private Message (PM) here on the forums. You should see a small envelope in the upper right corner of the screen, when it changes color you will know you have a PM to view.
I would be happy to help, but since I am in North Texas I don't think that is a viable option Sorry....
Justin
FiOS TV, Internet, and phone user
QIP7232, QIP7100-P2, IMG 1.9A
Keller, TX 76248

I need help with my iPod restrictions!

I need help with my iPod restrictions!!

Withuor more information all I can do is say read:
iOS: Understanding Restrictions
or chapter 26 of the users guide
iPod touch User Guide (For iOS 5.0 Software)

Need help setting up and configuring rsync

Hello
I need help setting up, or rather configuring rsync to sync data between my brand new iMac and my Macbook Air.
Here is what I would like to:
- I want all of the files on both machines to be an exact mirror or copy of each other. Basically I have an iMac for at home, and then a Macbook Air for the road.
- The main folder on both Macs is called 'Sara' and I want the contents (mainly the 'movies' folder, 'music' folder, 'documents' folder and 'pictures' folder) to immediately sync up with each other when both of them are on my home network.
- this means if I'm working on a file at home on my Macbook, it will immediately write to the same directory on my iMac and vice versa (if I'm working on file(s) on my iMac, it will immediately save the contents to my Macbook). This way, if I'm working on last minute project my iMac, and then have to head out the door to the airport, the file is immediately saved to my Macbook (no usb for USB transfer).
- hopefully this makes sense??
Any help is greatly appreciated!
Thanks

It's a lofty but unrealistic goal. Rsync does not run automatically. There is no realistic method of instantaneously synching two computers over the internet or even on a LAN.
I would suggest you might try using Synk Pro which, in theory, can keep two devices in sync when they are both on the same network (and both have shared and mounted drives.)
If you must do this with rsync then I suggest a Google search for rsync tutorials.

I need help setting up an apple id for my sons phone. It seems his email address has been taken and/or we cant get the password.

I need help setting up an apple id for my son's phone. It seems his email address has been taken and/or we cant get the password.

Two different things
If you forgot the password
If you forgot your Apple ID password - Apple Support
If the email ID you want to use is in use by someone else - then you may need a new one
The iCloud ID's are usually unique and may be of help if you set one up

Need help Setting up Multiple Static Ip , 1 for each port of the fios router

Need help Setting up multiple Static Ip on my fios router
I have been trying to figure out how to set up multiple ip in my fios router.
However I kind of managed how to set up multiple static ip However the way I want it is for each port of my router to have an external ip signed to it. ( like 4 different modem in 1 )
Verizon gave me 5 static ip but they can not help me how to set it up.
Have anyone here done more then one static ip on different ports? I assume that the process will be the after the second static ip.

You want to set up Static Nat. You will not assign the IP to a port, but rather to a local machine. Figure out what machines you want your IP's to go to. Under the firewall section you will see static nat. Pick the machine you want and enter one of the IP's you were assigned.

Need help setting up FCE 4 PLEASE

OK, I'm NOT a professional, just need help setting up.
Just purchased FCE 4. Need to set up my Sony HDR SR11. I've already recorded most of my stuff in HD SP. Can someone Please help me set up?
thanks

Thanks for the info.
I updated and did a search in my manual for Log and transfer which didn't go to anything I can figure out. Sorry, I don't have time to read 1152 pages.
Can anyone just tell me how to get this going? There should be a simple set up correct?

My email is not working in lightroom. Need help setting that up.

Need help setting up my email in lightroom. For some reason it's not connecting.

Try posting in the Lightroom forum. People there are more tuned in to the detail working of the application:
http://forums.adobe.com/community/lightroom?view=discussions

Need help setting up corporate e-mail on Samsung Continuum...

I have a Samsung Continuum and I would like to set-up my corporate e-mail. At work, we use Outlook Express and I was wondering how I need to set this up to make it work?

You will have to contact a member of your IT department at your place of employment. They will be able to give you permission to receive mail outside of work and they will also help your set the feature up on your phone.
Thank You
RalphT_verizonsupport

I have a Steinberg MI4 and a Roland Fantom X7, and am trying to use my Fantom in Logic to record audio. Need help setting it all up using MIDI cables. Please help !

I have a Steinberg MI4 and a Roland Fantom X7, and am trying to use my Fantom in Logic to record audio. Need help setting it all up using MIDI cables. Please help !

Encryption wouldn't matter except for Wifi.
While 10.2 might help, there's not much you can do on the Internet these days with less than 10.4.11
Tiger Requirements...
To use Mac OS X 10.4 Tiger, your Macintosh needs:
    * A PowerPC G3, G4, or G5 processor
    * Built-in FireWire
    * At least 256 MB of RAM (I recommend 1GB minimum)
    * DVD drive (DVD-ROM), Combo (CD-RW/DVD-ROM) or SuperDrive (DVD-R) for installation
    * At least 3 GB of free disk space; 4 GB if you install the XCode 2 Developer Tools (I recommend 20GB minimum)
http://support.apple.com/kb/HT1514
http://www.ebay.com/sch/i.html?_nkw=mac+os+x+tiger+retail+10.4
See Tom's, (Texas Mac Man), great info on where/how to find/get Tiger...
https://discussions.apple.com/message/15305521#15305521
Or Ali Brown's great info on where/how to find/get Tiger...
http://discussions.apple.com/thread.jspa?messageID=10381710#10381710
As far as Memory, that's sort of easy, find your eMac here...
http://eshop.macsales.com/MyOWC/Models.cfm?Family=emac&sType=Memory
As far as Hard Drive, it's not easy to replace the Internal drive, I'd maybe suggest an external Firewire drive to boot from...
http://eshop.macsales.com/item/Other%20World%20Computing/MAU4S7500G16/

SOLVED: Need help setting up user restrictions/permissions at work

Similar Messages

Maybe you are looking for