I am given a task to configure a RedHat Enterprise Linux 5 Gnome PC such that a specific user - say USER1 will have very limited desktop access. The requirements include:
- Access to all of the desktop menus (Application, Places, System) and icons (Computer, User's Home etc.) must be restricted.
- Restrict shell access to most of the folders but user's own home folder.
- This user (USER1) should only have few pre-configured icons/shortcuts on their desktop and that's all he/she should be able to run/double-click.
- This user (USER1) should not be able to run any shell commands that will affect any file/folder but their own.
Basically it's all locked-down PC with very limited functionality available to this particular user. If another authorized user or root logs in - then all usual bells and whistles should be available as normal.
We have achieved this on Windows using Local Security Settings but I am not sure how to do that in Linux.
I have heard of SELinux and have tried using 'SELinux Management Tool' but either it's not very useful or I don't know how to use it properly.