I run a small business and would like to use Linux for its free naturet. Is there a way to lock down linux using software or a whole distro that would prevent people from doing pretty much anything other than opening a web browser similar to Windows or ChromeOS. I would use ChromeOS, had it not been made by Google as I am not super keen on using something made by big tech.
Edit: This would be for employees and is exclusively about endpoint security, mot enforcing staying on task.
As long as you don’t give the users sudo powers there is little they can do to screw up the system.
But that would only make sense if you want them to have their own users. If it’s just a public computer, you probably want the kiosk thin mentioned before.
There’s also the risk of users saving and distributing confidential data. You don’t need admin rights for that! I’m not actually sure this applies to OP, but if he’s giving everyone a web browser, it certainly seems like a risk.
A cell phone can save and distribute data.
He didn’t say it was crazy confidential. I got the feeling it was more about keeping them from fucking around and breaking it.
Correct
If Snowden can exfiltrate data from the NSA, there is simply no way for your average employer to prevent this through computer restrictions. Effort in that direction is a total waste of money.
This is a company policy issue, enforced through non-disclosure agreements and, ultimately, the legal system.