Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Lawrence D'Oliveiro <ldo@nz.invalid>
Newsgroups: comp.os.linux.misc
Subject: Re: Distros specifically designed for children
Date: Thu, 22 May 2025 01:05:30 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 12
Message-ID: <100lt8q$33uf2$2@dont-email.me>
References: <100lcd7$30vat$1@dont-email.me>
	<op.26w4r9ona3w0dxdave@hodgins.homeip.net> <100ln7s$332cu$1@dont-email.me>
	<100lot6$33bsr$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 22 May 2025 03:05:31 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="08c1197d0e2fbc8c5c93da80250c8ef4";
	logging-data="3275234"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX18zDoLO+HiRy6gZs0LXOZeN"
User-Agent: Pan/0.162 (Pokrosvk)
Cancel-Lock: sha1:1OwQ6C3lQemW5vKp6oiVc9Nn4/U=
Bytes: 1762

On Wed, 21 May 2025 23:51:02 -0000 (UTC), Robert Heller wrote:

> OTOH,  creating an account for a child *without* sudo privs is quite
> possible and probably advisable.  This is doable on any Linux system.

You can go further, and create a locked-down account without even many of 
the capabilities of a regular user account. For example, you can put their 
home directory in its own filesystem namespace, so they cannot see other 
users’ files. You can make various files/directories in that home 
directory read-only and owned by root, which prevents them from even 
changing their own user preferences for certain things. You can limit 
their access to the network on a per-user basis, etc etc.