Eric J. Watson
2003-09-25, 12:54 PM CDT
"ext2box" <ext2box@yahoo.com> wrote in message
news:vmjuaam8ua872b@corp.supernews.com...
> I'm looking into the possibility of using the Linux in our internet cafe.
> Questions:
>
> 1. Is there any Cafe management software available for Linux ?
>
I don't even know what that is. What do computer labs do? They certainly
don't give any user "root" permissions unless they assign a hard drive for a
class. Ply an admin from your local college with praise, beer, and pizza.
> 2.What is the best way to lock down the kde desktop ? (Kiosk
Mode?)
>
There is a "Kiosk Mode" set up. How you do it is just a matter of how much
time you want to invest.
You can script the creation of a user account/Home Directory, specify group
membership/permissions, and have it reside in /tmp. Any changes or
customizations become specific to the user. When they log out, a script can
delete the /Home acc'nt from /tmp. Between this and chroot, no changes are
possible to the actual O.S. (if it is properly locked down).
Read up on chroot, how to use it, and the variations on chroot. This how
you control what the user can do--as the commands they have available are
the ones you actually choose, and none of them will run with "root"
permissions. Somewhere, I saw a crippled version of "busybox" created for
that purpose. USE NO LINKS to anything above the "/./", that defeats the
purpose of the thing.
>
> 3. Can user time limits be controlled based on time purchased ?
( Some type
> of prepaid access user account)
>
It all depends on what you want to do, and how you want to do it. Disk
quotas and such are available. You can also specify available network
resources by machine or group of users or user.
Scripts can do very powerful and dynamic things. You are limited only by
your imagination and the time you want to invest. Don't attempt to do it
cold--practice, practice, practice.
NetFilter can be used to assign all sorts of really neat things. The
assignments can be done with groups as well as specific Mac Addresses or
other authentication, even down to users.
>
> Goal:
>
> 1. To provide cafe users with internet access and use of the KDE
desktop
> and cafe approved apps. (Kmail, Knode, Open office and any other apps that
> will not cause any security risk to the user or Cafe)
>
Again, you have to pick and choose what you want available. If it ain't
there, they can't use it. We are not talking about a "standard" distro.
You will have to do extensive customization.
No matter what you do; Linux is not windows. People who are only familiar
with windows are not going to like the environment.
You will catch all sorts of hell from the online chat--people and gamers.
Many websites out there are not compliant with the official specifications
for the web, they have proprietary stuff which only runs well on Explorer.
People will ***** about that also.
> I'd appreciate any advice tips ect.
>
> Thanks
>
>
news:vmjuaam8ua872b@corp.supernews.com...
> I'm looking into the possibility of using the Linux in our internet cafe.
> Questions:
>
> 1. Is there any Cafe management software available for Linux ?
>
I don't even know what that is. What do computer labs do? They certainly
don't give any user "root" permissions unless they assign a hard drive for a
class. Ply an admin from your local college with praise, beer, and pizza.
> 2.What is the best way to lock down the kde desktop ? (Kiosk
Mode?)
>
There is a "Kiosk Mode" set up. How you do it is just a matter of how much
time you want to invest.
You can script the creation of a user account/Home Directory, specify group
membership/permissions, and have it reside in /tmp. Any changes or
customizations become specific to the user. When they log out, a script can
delete the /Home acc'nt from /tmp. Between this and chroot, no changes are
possible to the actual O.S. (if it is properly locked down).
Read up on chroot, how to use it, and the variations on chroot. This how
you control what the user can do--as the commands they have available are
the ones you actually choose, and none of them will run with "root"
permissions. Somewhere, I saw a crippled version of "busybox" created for
that purpose. USE NO LINKS to anything above the "/./", that defeats the
purpose of the thing.
>
> 3. Can user time limits be controlled based on time purchased ?
( Some type
> of prepaid access user account)
>
It all depends on what you want to do, and how you want to do it. Disk
quotas and such are available. You can also specify available network
resources by machine or group of users or user.
Scripts can do very powerful and dynamic things. You are limited only by
your imagination and the time you want to invest. Don't attempt to do it
cold--practice, practice, practice.
NetFilter can be used to assign all sorts of really neat things. The
assignments can be done with groups as well as specific Mac Addresses or
other authentication, even down to users.
>
> Goal:
>
> 1. To provide cafe users with internet access and use of the KDE
desktop
> and cafe approved apps. (Kmail, Knode, Open office and any other apps that
> will not cause any security risk to the user or Cafe)
>
Again, you have to pick and choose what you want available. If it ain't
there, they can't use it. We are not talking about a "standard" distro.
You will have to do extensive customization.
No matter what you do; Linux is not windows. People who are only familiar
with windows are not going to like the environment.
You will catch all sorts of hell from the online chat--people and gamers.
Many websites out there are not compliant with the official specifications
for the web, they have proprietary stuff which only runs well on Explorer.
People will ***** about that also.
> I'd appreciate any advice tips ect.
>
> Thanks
>
>