Do not put the 'visitor' account in the administrator group. There is no
reason to give a visitor account administrative access -- the whole point
of a visitor account is to limit them to only the access they need.


On Fri, Apr 18, 2014 at 7:14 PM, paul g <pj.world at hotmail.com> wrote:

> I have been working on trying to learn how to properly setup a 'Visitor
> Account' on my laptop. Everything seem ok so far, I have a couple
> screenshots 'shown below' to ask what you may think about this scenario so
> far. Suggestions are certainly welcome.
>
> [image: Visitor-ACCT.png]<http://forums.linuxmint.com/download/file.php?id=16919&mode=view>
> <----------Terminal permissions
>
> [image: Users-Groups1.png]<http://forums.linuxmint.com/download/file.php?id=16920&mode=view>
> <----------Users shown in Cinnamon
>
> [image: Users-Groups-Settings1.png]<http://forums.linuxmint.com/download/file.php?id=16921&mode=view>
> <---------users, groups, etc.
>
> Note: when 'visitor' is clicked 'not shown above' there is nothing but
> 'visitor' shown within 'Groups'.
>
> Note: that I added visitor to administrator group 'that should be correct
> right in order to access visitor through admin? I can 'cd' into visitor as
> user 'paul. When I login to visitor from the splash screen and try to
> access 'paul' via terminal 'permission is denied'
>
> The end goal is to ensure 'visitor' cannot access sudo or other sudoers or
> users files whatsoever'.
>
> Any thoughts as far as how this may be setup improperly?
>
> Thank you,
>
> _______________________________________________
> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
> tclug-list at mn-linux.org
> http://mailman.mn-linux.org/mailman/listinfo/tclug-list
>
>


-- 
Jeff Chapin
President, CedarLug, retired
President, UNIPC, "I'll get around to it"
President, UNI Scuba Club
Senator, NISG, retired
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.mn-linux.org/pipermail/tclug-list/attachments/20140421/2d9e1a86/attachment.html>