Secure kiosks: no longer an oxymoron.
The goal of the Fedora Kiosk Spin is to create an operating system that can only be used as a kiosk. It is intended for use in public locations such as libraries, schools, and event venues.
Imagine a machine sitting at a library (for example) running a liveDVD a single guest user account - root (administrative) account has been disabled. This kiosk can only talk to web ports, and when you log out all files and processes get destroyed so there is nothing left in the user account for the next user to search for. Since all processes are destroyed on logout, you can rest assured no one left a process to watch your keystrokes. Starting from scratch with a clean system is as easy as a reboot.
With the Fedora Kiosk Spin, your terminal can be as secure as you want it to be. <b><a href="#about">Learn more.</a></b>
Click image to enlarge
About
The Fedora Kiosk Spin relies on SELinux (Security-Enhanced Linux) for its combination of functionality and security. It features the xguest package, which creates a user of type xguest_t, a special user type designed specifically with kiosk usage in mind.
Also created for the Fedora Kiosk Spin is a PAM (Pluggable Authentication Module) called pam_sepermit which allows certain users (xguest) to login without a password if SELinux is on in enforcing mode. The spin uses pam_namespace to setup temporary home and /tmp directories. The system is easily extended by building a liveimage where iptables force all network traffic to go to a singe host or network so that you can lock down your kiosk to only work on said network.
Downloads
Torrent Download
32-bit PC Edition
This edition is for the highest compatibility; it will work on both 32-bit and 64-bit computers.
54K Torrent File for 32-bit PC ISO
How do I use this file?
64-bit PC Edition
Enjoy the full power and speed of a 64-bit computer. Not compatible with 32-bit computers.
54K Torrent File for 64-bit PC ISO
How do I use this file?
Direct Download
32-bit PC Edition
This edition is for the highest compatibility; it will work on both 32-bit and 64-bit computers.
500 MB for 32-bit PC ISO
How do I use this file?
64-bit PC Edition
Enjoy the full power and speed of a 64-bit computer. Not compatible with 32-bit computers.
500 MB for 64-bit PC ISO
How do I use this file?
Unsure if your computer is 32-bit or 64-bit?
- The 32-bit edition is compatible with both 32-bit and 64-bit PCs.
- Read our documentation on how to tell if your computer is 32-bit or 64-bit.
Older releases of this spin can be found at archive.fedoraproject.org.
Moblin™ is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries.
Support
Help via Chat
Users and developers are available in the #fedora irc channel on irc.freenode.net for real-time conversations.
General help is available in irc channel #fedora on irc.freenode.net.
For help using IRC, please visit the Fedora IRC how-to.
Help via Email
Users and developers are also available on the mailing list at users@lists.fedoraproject.org.
General help with Fedora is available on the Fedora users' mailing list at users@lists.fedoraproject.org.
For guidance on how to interact on Fedora mailing lists, please review the Fedora Mailing List Guidelines.
General Help Using Fedora
Sometimes you may encounter an issue with this spin that you can get help with using general Fedora support resources. A list of those resources is available at the Fedora 'Get Help' page.
Kiosk
Login screen
Users of your kiosk will only be able to access a single guest account, with information and processes that are wiped and rest after each logout.
