* Ed Harrison (ed.tman@verizon.net) [030528 15:18]:
# Make the brower executable (or script) mode 750, change its group # to foo, and add users who can use it to group foo.
Won't setting Konqueror to "foo" mess up a lot of stuff in KDE and SuSE?
Well, konqueror won't work if you aren't in the foo group. If you don't use kde that's not really a problem. A better solution is to force all traffic to port 80 and 443 through a proxy that the user has to authenticate to in order to use. Of course, the kids can always just find an open proxy somewhere that they can use to bypass this restriction as well. Once they get that sophisticated they'd probably figure out that they can just boot with 'init=/bin/sh' in order to change root's passwd (and the restrictions) or boot from something like the live eval cd. -- -ckm