[openFATE 306282] Restricted Guest Account
Feature added by: Stephan Binner (Beineri) Feature #306282, revision 1, last change by Title: Restricted Guest Account openSUSE-11.2: Unconfirmed Priority Requester: Desirable Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, look into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Stephan Binner (Beineri) Feature #306282, revision 2 Title: Restricted Guest Account openSUSE-11.2: Unconfirmed Priority Requester: Desirable Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able - to start application with console privileges, look into home + to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Michael Löffler (michl19) Feature #306282, revision 5 Title: Restricted Guest Account - openSUSE-11.2: Unconfirmed + openSUSE-11.2: Evaluation Priority Requester: Desirable Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. + Discussion: + #1: Michael Löffler (michl19) (2009-03-25 17:20:47) + This sounds to me more like a corner case. And I always like fate + request where even the requester doesn't stand really behind the + request (desirable) -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: T. J. Brumfield (enderandrew) Feature #306282, revision 8 Title: Restricted Guest Account openSUSE-11.2: Evaluation Priority Requester: Desirable Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) + #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) + I think this has some possibilities for "kiosk" use as well, though I + think a specialized live-CD is still the best way to go for a kiosk. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Stephan Kulow (coolo) Feature #306282, revision 9 Title: Restricted Guest Account openSUSE-11.2: Evaluation Priority Requester: Desirable + Projectmanager: Neutral Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. + #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) + sounds like a neat community project. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: John Shand (jshand2008) Feature #306282, revision 10 Title: Restricted Guest Account openSUSE-11.2: Evaluation Priority Requester: Desirable Projectmanager: Neutral Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. + #4: John Shand (jshand2008) (2009-07-11 07:35:58) + This sounds like a great idea to implement. Would prevent quite a few + issues of security blunders. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Stephan Kulow (coolo) Feature #306282, revision 12 Title: Restricted Guest Account - openSUSE-11.2: Evaluation + openSUSE-11.2: Rejected by Stephan Kulow (coolo) + reject date: 2009-08-12 11:18:00 + reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: jpxviii jpxviii (jpxviii) Feature #306282, revision 13 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral + openSUSE-11.4: Unconfirmed + Priority + Requester: Desirable Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: jpxviii jpxviii (jpxviii) Feature #306282, revision 14 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: Unconfirmed Priority - Requester: Desirable + Requester: Important Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: jpxviii jpxviii (jpxviii) Feature #306282, revision 15 Title: Restricted Guest Account + Hackweek V: Unconfirmed + Priority + Requester: Important openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: Unconfirmed Priority Requester: Important Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: jpxviii jpxviii (jpxviii) Feature #306282, revision 16 Title: Restricted Guest Account Hackweek V: Unconfirmed Priority Requester: Important openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: Unconfirmed Priority - Requester: Important + Requester: Mandatory Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Alexandr Mityunin (xandry) Feature #306282, revision 17 Title: Restricted Guest Account Hackweek V: Unconfirmed Priority Requester: Important openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: Unconfirmed Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. + #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) + For example, it is possible to take for a basis a package from Mandriva + or Fedora. + Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- + mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. + rpm + Fedora: ftp://ftp.muug.mb. + ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. + rpm -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Andreas Jaeger (a_jaeger) Feature #306282, revision 19 Title: Restricted Guest Account - Hackweek V: Unconfirmed - Priority - Requester: Important openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral - openSUSE-11.4: Unconfirmed + openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm + #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) + Alexandr, do you want to look at these and give it a start? -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Alexandr Mityunin (xandry) Feature #306282, revision 21 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Product Manager: (Novell) Project Manager: (Novell) Engineering Manager: (Novell) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? + #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) + Yes. I want. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Michal Papis (mpapis) Feature #306282, revision 22 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Product Manager: (Novell) Project Manager: (Novell) Engineering Manager: (Novell) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. + #8: Michal Papis (mpapis) (2010-12-12 02:36:09) + I would ask for a button "Lock my session and open guest session" So I + can give my laptop for short use to somebody, like checking sites or + emails. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Electric Squid (ElectricSquid) Feature #306282, revision 23 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Product Manager: (Novell) Project Manager: (Novell) Engineering Manager: (Novell) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. #8: Michal Papis (mpapis) (2010-12-12 02:36:09) I would ask for a button "Lock my session and open guest session" So I can give my laptop for short use to somebody, like checking sites or emails. + #9: Electric Squid (electricsquid) (2011-06-29 20:03:58) + A guest account is mandatory for Prey Project App (stolen laptop + recovery) to be successful. The rogue user needs to be able to log in + for Prey to start capturing information, webcam pictures of his/her + face, and IP address information. -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Edvard Holst (Loki657) Feature #306282, revision 25 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. #8: Michal Papis (mpapis) (2010-12-12 02:36:09) I would ask for a button "Lock my session and open guest session" So I can give my laptop for short use to somebody, like checking sites or emails. #9: Electric Squid (electricsquid) (2011-06-29 20:03:58) A guest account is mandatory for Prey Project App (stolen laptop recovery) to be successful. The rogue user needs to be able to log in for Prey to start capturing information, webcam pictures of his/her face, and IP address information. + #10: Edvard Holst (loki657) (2012-04-28 12:59:12) + Most other Linux distros have this feature by now and its extremely + useful. Hoping OpenSUSE will follow suit soon! -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: christian barranco (chbar) Feature #306282, revision 27 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory Requested by: Stephan Binner (beineri) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. #8: Michal Papis (mpapis) (2010-12-12 02:36:09) I would ask for a button "Lock my session and open guest session" So I can give my laptop for short use to somebody, like checking sites or emails. #9: Electric Squid (electricsquid) (2011-06-29 20:03:58) A guest account is mandatory for Prey Project App (stolen laptop recovery) to be successful. The rogue user needs to be able to log in for Prey to start capturing information, webcam pictures of his/her face, and IP address information. #10: Edvard Holst (loki657) (2012-04-28 12:59:12) Most other Linux distros have this feature by now and its extremely useful. Hoping OpenSUSE will follow suit soon! + #11: christian barranco (chbar) (2014-01-27 03:26:49) + I just move from Fedora 20 to OpenSuse 13.1. So far, I am very + satisfied by this move. However, I miss the xguest feature I had with + Fedora. Not knowing anything on this field, is it really difficult to + get the xguest feature of Fedora working for OpenSuse as well ? Thanks + for your great distro and support. + Christian -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Karl Cheng (qantas94heavy) Feature #306282, revision 29 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral openSUSE-11.4: New Priority Requester: Mandatory + openSUSE Distribution: New + Priority + Requester: Desirable Requested by: Stephan Binner (beineri) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. #8: Michal Papis (mpapis) (2010-12-12 02:36:09) I would ask for a button "Lock my session and open guest session" So I can give my laptop for short use to somebody, like checking sites or emails. #9: Electric Squid (electricsquid) (2011-06-29 20:03:58) A guest account is mandatory for Prey Project App (stolen laptop recovery) to be successful. The rogue user needs to be able to log in for Prey to start capturing information, webcam pictures of his/her face, and IP address information. #10: Edvard Holst (loki657) (2012-04-28 12:59:12) Most other Linux distros have this feature by now and its extremely useful. Hoping OpenSUSE will follow suit soon! #11: christian barranco (chbar) (2014-01-27 03:26:49) I just move from Fedora 20 to OpenSuse 13.1. So far, I am very satisfied by this move. However, I miss the xguest feature I had with Fedora. Not knowing anything on this field, is it really difficult to get the xguest feature of Fedora working for OpenSuse as well ? Thanks for your great distro and support. Christian -- openSUSE Feature: https://features.opensuse.org/306282
Feature changed by: Karl Cheng (qantas94heavy) Feature #306282, revision 30 Title: Restricted Guest Account openSUSE-11.2: Rejected by Stephan Kulow (coolo) reject date: 2009-08-12 11:18:00 reject reason: no volunteer and only 5 votes. Priority Requester: Desirable Projectmanager: Neutral - openSUSE-11.4: New + openSUSE-11.4: Rejected by Karl Cheng (qantas94heavy) + reject reason: Not done in time for openSUSE 11.4. Priority Requester: Mandatory openSUSE Distribution: New Priority Requester: Desirable Requested by: Stephan Binner (beineri) Partner organization: openSUSE.org Description: openSUSE should support a "Guest" account with a temporary home directory and restricted permissions (via AppArmor, like not being able to start application with console privileges, looking into home directories as "other" user etc.). An authenticated user has to enable/start this user account. This could be either implemented with a by default existing but inactivated user account (like Windows) or temporary created user account via login manager/session switch applet (like Ubuntu, https://blueprints.launchpad.net/ubuntu/+spec/gdm-guest-login). Use Case: Allow to lend your laptop to someone else for quick email check, surfing or playing music at a party. Discussion: #1: Michael Löffler (michl19) (2009-03-25 17:20:47) This sounds to me more like a corner case. And I always like fate request where even the requester doesn't stand really behind the request (desirable) #2: T. J. Brumfield (enderandrew) (2009-06-13 21:58:26) I think this has some possibilities for "kiosk" use as well, though I think a specialized live-CD is still the best way to go for a kiosk. #3: Stephan Kulow (coolo) (2009-06-24 12:34:31) sounds like a neat community project. #4: John Shand (jshand2008) (2009-07-11 07:35:58) This sounds like a great idea to implement. Would prevent quite a few issues of security blunders. #5: Alexandr Mityunin (xandry) (2010-09-22 16:20:48) For example, it is possible to take for a basis a package from Mandriva or Fedora. Mandriva: ftp://ftp.icm.edu.pl/vol/rzm1/linux- mandriva/devel/cooker/SRPMS/main/release/xguest-1.0.8-5mdv2010.1.src. rpm Fedora: ftp://ftp.muug.mb. ca/mirror/fedora/linux/updates/testing/13/SRPMS/xguest-1.0.8-6.fc13.src. rpm #6: Andreas Jaeger (a_jaeger) (2010-11-08 16:27:20) (reply to #5) Alexandr, do you want to look at these and give it a start? #7: Alexandr Mityunin (xandry) (2010-12-05 10:23:24) (reply to #6) Yes. I want. #8: Michal Papis (mpapis) (2010-12-12 02:36:09) I would ask for a button "Lock my session and open guest session" So I can give my laptop for short use to somebody, like checking sites or emails. #9: Electric Squid (electricsquid) (2011-06-29 20:03:58) A guest account is mandatory for Prey Project App (stolen laptop recovery) to be successful. The rogue user needs to be able to log in for Prey to start capturing information, webcam pictures of his/her face, and IP address information. #10: Edvard Holst (loki657) (2012-04-28 12:59:12) Most other Linux distros have this feature by now and its extremely useful. Hoping OpenSUSE will follow suit soon! #11: christian barranco (chbar) (2014-01-27 03:26:49) I just move from Fedora 20 to OpenSuse 13.1. So far, I am very satisfied by this move. However, I miss the xguest feature I had with Fedora. Not knowing anything on this field, is it really difficult to get the xguest feature of Fedora working for OpenSuse as well ? Thanks for your great distro and support. Christian -- openSUSE Feature: https://features.opensuse.org/306282
participants (1)
-
fate_noreply＠suse.de