Posted by: Grant Johnson
on June 17, 2006 10:55 AM
Take away all permissions outside of the home directory. They can do what they like, inside of their home, even install applications, as long as everything is in the home. Now install the things they need to do their jobs in their normal places.
When something goes terribly wrong, rm -Rf<nobr> <wbr></nobr>/home/moron
They still have what they need, but their customizations are gone because they messed it up. You could even do something a little less drastic like mv<nobr> <wbr></nobr>/home/moron<nobr> <wbr></nobr>/home/moron.`date %Y%m%d` Their stuff is still on the drive and they can still get to it, but they start with a clean slate.
I created a user on my PC for my young son to play with (20 months) and he can make quite a mess, but when it becomes unmanageable, I just empty his home directory and let him start with a clean slate again.
Perhaps something in between
Posted by: Grant Johnson on June 17, 2006 10:55 AMWhen something goes terribly wrong, rm -Rf<nobr> <wbr></nobr>/home/moron
They still have what they need, but their customizations are gone because they messed it up. You could even do something a little less drastic like mv<nobr> <wbr></nobr>/home/moron<nobr> <wbr></nobr>/home/moron.`date %Y%m%d` Their stuff is still on the drive and they can still get to it, but they start with a clean slate.
I created a user on my PC for my young son to play with (20 months) and he can make quite a mess, but when it becomes unmanageable, I just empty his home directory and let him start with a clean slate again.
#