GUI jail - how?

[cdoc]

Hello, I am trying to figure a way of "jailing" the functionality of my raspberry pi to a GUI's functionality. Meaning, all i wanna do is power up the RPi and have no other functionality but my own program's. I need it to be impossible for the user to "escape" my pseudo-sandbox and access the RPi's operating system.

Any directions would be appreciated. Thank you!

[topguy]

A "knowledgeable" user with physical access to the device can break any jail you can create. ( he just extracts the SD-card and change it on another device )

But first you have to identify the ways a "less knowledgable" user might try to access the terminal or the filesystem and then disable those ways.

- disable ctrl-alt-backspace as a way of killing the X-server.
- uninstall all editors, filebrowsers and terminalprograms. ( or at least clean them out of the menus )
- disable "run" menu (if it exist)
- .... and more..

--

Do you want the user to use more than one program or is it specifically one program that the user only need to use ? You could then start that program in kiosk-mode and no "desktop" features would be available.

[RaTTuS]

also
limit virtual terminals to 1
disable ssh access
...

but exactly why ?

[Gavinmc42]

Ultibo