{"id":136,"date":"2008-08-15T11:01:57","date_gmt":"2008-08-15T19:01:57","guid":{"rendered":"http:\/\/jaredrobinson.com\/blog\/?p=136"},"modified":"2009-07-11T04:11:43","modified_gmt":"2009-07-11T04:11:43","slug":"xguest","status":"publish","type":"post","link":"https:\/\/jaredrobinson.com\/blog\/xguest\/","title":{"rendered":"xguest"},"content":{"rendered":"<p>I just discovered and installed the _xguest_ package for Fedora 8 and 9.  Here&#8217;s what it does:<\/p>\n<p>> Installing this package sets up the xguest user to be used as a temporary account to switch to or as a kiosk user account. The account is disabled unless SELinux is in enforcing mode. The user is only allowed to log in via gdm [or the fast-user-swiching applet]. The home and temporary directories of the user will be polyinstantiated and mounted on tmpfs.<\/p>\n<p>Here&#8217;s how to install it:<\/p>\n<p>    yum install xguest<\/p>\n<p>I hit a brick wall when I first tried it. I thought my machine was in SELinux Enforcing mode, when it wasn&#8217;t &#8212; it was in Permissive mode. I fixed it using system-config-selinux.<\/p>\n<p>It&#8217;s possible to change what the xguest user can do using system-config-selinux. I&#8217;ve attached a screenshot showing what capabilities can be granted or revoked.<\/p>\n<p><img decoding=\"async\" src=\"\/blog\/wp-content\/uploads\/2008\/08\/xguest-SELinux-Admin.png\" alt=\"SELinux Administration for xguest user\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I just discovered and installed the _xguest_ package for Fedora 8 and 9. Here&#8217;s what it does: > Installing this package sets up the xguest user to be used as a temporary account to switch to or as a kiosk user account. The account is disabled unless SELinux is in enforcing mode. The user is &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/jaredrobinson.com\/blog\/xguest\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;xguest&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,9,16,17],"tags":[],"class_list":["post-136","post","type-post","status-publish","format-standard","hentry","category-fedora","category-linux","category-security","category-tech"],"_links":{"self":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/comments?post=136"}],"version-history":[{"count":1,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/136\/revisions"}],"predecessor-version":[{"id":383,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/136\/revisions\/383"}],"wp:attachment":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/media?parent=136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/categories?post=136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/tags?post=136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}