Feature changed by: Electric Squid (ElectricSquid) Feature #306282, revision 23 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Product Manager: (Novell) Project Manager: (Novell) Engineering Manager: (Novell) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. #8: Michal Papis (mpapis) (2010-12-12 02:36:09) I would ask for a button "Lock my session and open guest session" So I can give my laptop for short use to somebody, like checking sites or emails. + #9: Electric Squid (electricsquid) (2011-06-29 20:03:58) + A guest account is mandatory for Prey Project App (stolen laptop + recovery) to be successful. The rogue user needs to be able to log in + for Prey to start capturing information, webcam pictures of his/her + face, and IP address information. -- openSUSE Feature: https://features.opensuse.org/306282