Journal greginnj's Journal: Virtual Desktop management for schools
http://linux.slashdot.org/comments.pl?sid=238027&cid=19460427
(Score:5, Interesting)
by Prospero2007 (1113755) Alter Relationship on Sunday June 10, @05:41PM (#19460427)
Yes, Yes. Connor is my right-hand man so to speak. He has access to root, but that is because I can trust him. Our school webpage is going to describe the configuration we have in more detail, but in short here is how I have it set up: (Not all students have that kind of access.)
Linux
Students log in with username 'student' password 'student' -Kiosktool + chmod -R a-w on /home/student/Desktop seems to effectively lock down the desktop. Students can't change anything, and what they see is what they get. Kiosk-tool is excellent, but it isn't perfect. You have to manually set certain file permissions for it to be effective. (Operations like eject can't be performed by your average Johnny.)
Windows We have deepfreeze + a limited user account. Windows explorer is effectively disabled, and the 'public fox' extensions is in full effect on firefox keeping the students from downloaded pesky .exe files and changing the browser settings. (Public fox is also being used on the linux side. It's great!)
shared resources
I have a Samba Server set up
Internal Bind9 Just as an aside we have named every computer in the wing and have set up and internal *.imak domain. Every computer has its name prominently displayed. For example, sambaserver.imak is where our public samba shares are located. Zeus.imak is my teacher computer --etc.
All computers have the following on both OS'S so that the students can work collaboratively and the teacher can maintain control:
-Apache Web servers with php interpreters.
-FTP Server
-SSH Server
-VNC Server -Tight VNC on windows
-KRFB on Linux
(THE VNC is cool because it allows the teacher to remotely comandeer student machines. The name resolution makes it easier, but I also have interactive bird's-eye-view seating charts at each teacher desk. --Point and click to take over the student machine. It's neat.)
-Anyway, I don't mean to sound like a wise-guy, but I thought a little more elaboration was necessary. Any comments that will help to enhance my security are appreciated!
Josh Beck
[ Reply to This | Parent ]
(Score:5, Interesting)
by Prospero2007 (1113755) Alter Relationship on Sunday June 10, @05:41PM (#19460427)
Yes, Yes. Connor is my right-hand man so to speak. He has access to root, but that is because I can trust him. Our school webpage is going to describe the configuration we have in more detail, but in short here is how I have it set up: (Not all students have that kind of access.)
Linux
Students log in with username 'student' password 'student' -Kiosktool + chmod -R a-w on
Windows We have deepfreeze + a limited user account. Windows explorer is effectively disabled, and the 'public fox' extensions is in full effect on firefox keeping the students from downloaded pesky
shared resources
I have a Samba Server set up
Internal Bind9 Just as an aside we have named every computer in the wing and have set up and internal *.imak domain. Every computer has its name prominently displayed. For example, sambaserver.imak is where our public samba shares are located. Zeus.imak is my teacher computer --etc.
All computers have the following on both OS'S so that the students can work collaboratively and the teacher can maintain control:
-Apache Web servers with php interpreters.
-FTP Server
-SSH Server
-VNC Server -Tight VNC on windows
-KRFB on Linux
(THE VNC is cool because it allows the teacher to remotely comandeer student machines. The name resolution makes it easier, but I also have interactive bird's-eye-view seating charts at each teacher desk. --Point and click to take over the student machine. It's neat.)
-Anyway, I don't mean to sound like a wise-guy, but I thought a little more elaboration was necessary. Any comments that will help to enhance my security are appreciated!
Josh Beck
[ Reply to This | Parent ]
