6.5. xguest: Kiosk Mode

6.5. xguest: Kiosk Mode

The xguest package provides a kiosk user account. This account is used to secure machines that people walk up to and use, such as those at libraries, banks, airports, information kiosks, and coffee shops. The kiosk user account is very locked down: essentially, it only allows users to log in, and then use the Firefox application to browse Internet websites. Any changes made while logged in with his account, such as creating files or changing settings, are lost when you log out.

To set up the kiosk account:

  1. As the Linux root user, run yum install xguest command to install the xguest package. Install dependencies as required.

  2. In order to allow the kiosk account to be used by a variety of people, the account is not password-protected, and as such, the account can only be protected if SELinux is running in enforcing mode. Before logging in with this account, use the getenforce command to confirm that SELinux is running in enforcing mode: 

    $ /usr/sbin/getenforce
Enforcing

    If this is not the case, refer to Section 5.5, “SELinux Modes” for information about changing to enforcing mode. It is not possible to log in with this account if SELinux is in permissive mode or disabled.

  3. You can only log in to this account via the GNOME Display Manager (GDM). Once the xguest package is installed, a Guest account is added to GDM. To log in, click on the Guest account: