Lock down Linux for the workplace

champe20@kbin.social to Linux@lemmy.ml – 22 points –

I run a small business and would like to use Linux for its free naturet. Is there a way to lock down linux using software or a whole distro that would prevent people from doing pretty much anything other than opening a web browser similar to Windows or ChromeOS. I would use ChromeOS, had it not been made by Google as I am not super keen on using something made by big tech.

Edit: This would be for employees and is exclusively about endpoint security, mot enforcing staying on task.

39

You are viewing a single comment
View all comments

I'm sure there's a better solution, but SELinux is an option. It can be difficult to customize, but it's capable of locking down the system entirely. You could theoretically block all actions taken by the user except for a select few mozilla_t actions and others necessary for login.

But how will they have time to learn SELinux and run a business?

Haha. Yeah it takes time to learn how to do even the most basic things with it. Just how I would approach the situation