Lock Down Lubuntu

Hi All,

I am new to Linux and I have been tasked for a school to install Lubuntu on net books and lock it down so that the students can only use chrome.  I was able to install chrome and create a universal user but I do not know how to lock it down where the users only can use chrome.

So basically we need to remove all of the menu options besides power off or logout and have chrome on the desktop.  The students should not be able to download anything

Is there a script that I can run to accomplish this or what are the steps to accomplish this.

Thank you for all of your help
thomasm1948Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Patrick BogersDatacenter platform engineer LindowsCommented:
Hi

 Guessing you are using the GNOME install, have a look at the lockdown guide here.

 Cheers
thomasm1948Author Commented:
I went to the site and the paths are not correct for my version of Lubuntu
Patrick BogersDatacenter platform engineer LindowsCommented:
What if you search in terminal like?

locate lockdown
or
search lockdown

This should hint you where to look for the right paths.....
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

thomasm1948Author Commented:
If use locate lockdown, I get:

/usr/share/glib-2.0/schemas/org.gnome.desktop.lockdown.gschema.xml
Zephyr ICTCloud ArchitectCommented:
Doesn't Lubuntu use LXDE as desktop environment?

What exactly do you want to lock down?
Do you have firewall enabled for instance or do you want to go even deeper?
thomasm1948Author Commented:
I just want chrome to open in kiosk mode for the user Student.  The user should not be able to open anything else or save files to the system
Zephyr ICTCloud ArchitectCommented:
I don't know if Lubuntu is the better choice for this, have you thought about using something like this http://porteus-kiosk.org as an alternative?

It's a lot of work or can be if you're not familiar with Linux to do it yourself.
thomasm1948Author Commented:
For some reason they want to use Lubuntu and without a server to manage them.  So I am in a weird instance where the customer wants something that doesn't necessarily makes since.  

So I am just trying to figure out where to go and make the modifications and hopefully just put that in a bash file so that we can make the changes at a faster rate
Zephyr ICTCloud ArchitectCommented:
Try searching Google for kiosk script Ubuntu from someone over on Reddit, it can at least get you started... It's probably mostly for Gnome but it's a start...

I'd link it but I'm on mobile at the moment.
thomasm1948Author Commented:
It seems that this is an impossible task.  Everything that I have read is that the tools have been removed from Lubuntu.  I even tried to install gconf-editor and that gives me nothing to configure.  I tried to install kiosktool and lockdown editor but those are not available.  The only thing I can download is chrome

I thought Linux had more help than this, but I guess not.  There is no way to lock down and only give a user access to chrome in Linux.
Zephyr ICTCloud ArchitectCommented:
Well, there's plenty out there, but Lubuntu is not the most suitable for what you want to achieve I guess...

Did you look specifically for locking down LXDE? Maybe there's something to find about that...
thomasm1948Author Commented:
I am looking but I have looked just about every where.  There is no real documentation for doing this
Zephyr ICTCloud ArchitectCommented:
What about Xubuntu? It uses XFCE as a desktop and it actually does support Kiosk mode better than Lubuntu.
thomasm1948Author Commented:
I will download it and give it a try.  I am doing the testing from vmwaree player.
thomasm1948Author Commented:
OK i tried Xubuntu and the issue that I have is that although I copied the XML files as indicated from:

http://ubuntuforums.org/showthread.php?t=2113023 and https://sites.google.com/site/easylinuxtipsproject/xfce

The icons are not available or working when I log into the student profile.  The icons are just displayed as grey squares versus being displayed as the google chrome browser and the logout option
Zephyr ICTCloud ArchitectCommented:
You probably need to adjust the panel.xml for the launchers to work and show the correct icons and such ... I think you might find some more info here
thomasm1948Author Commented:
OK, figured it out.

Used leapad and opened /etc/xdg/xdg-xubuntu/xfce4/xfconf/xfce-perchannel-xml and changed the numbered.desktop with the correct name.  for example:  google-chrome.desktop

I figured out which one to use by going to /usr/share/applications.

now I need to figure out how to disable right click
Zephyr ICTCloud ArchitectCommented:
There's a thread on the Ubuntu forums that explains how to disable right-click by putting following in the .bashrc file

xmodmap -e "pointer = 1 2 99"
exit

Open in new window

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
thomasm1948Author Commented:
would that also disable it for the root user?
Zephyr ICTCloud ArchitectCommented:
If you put it in the .bashrc for the root then yes ... You can just put in the user for locked down desktop.
thomasm1948Author Commented:
when I add it to the .bashrc file for the Student and login I still can right click
Zephyr ICTCloud ArchitectCommented:
Did you put it as the very last line in .bashrc? Did the file exist or did you create it?
thomasm1948Author Commented:
yes I put it in the very last line of the .bashrc for the Student
Zephyr ICTCloud ArchitectCommented:
hmmmm ... Well might not work anymore like it used to...

If you just enter this command in the terminal, does it work then?
thomasm1948Author Commented:
it did work.  I was right clicking before the script finalized.  I opened the terminal under the Student it automatically closed and I was unable to right click

Thank you for all of your help
Zephyr ICTCloud ArchitectCommented:
Aha ... Ok :)

No problem
thomasm1948Author Commented:
Thank you for all of your help and your patients
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux

From novice to tech pro — start learning today.