MWhen should a guest account delete data? It would be simple to implement a method that deletes the data as part of power off by using a tmpfs,
But I normally think of a guest account not persisting that login session.
Then another question would be should it always be available? Or should it be something that the user creates via a ujust?
But I normally think of a guest account not persisting that login session.
Then another question would be should it always be available? Or should it be something that the user creates via a ujust?
F14 days is standard
RI'm strongly against an "always available" guest account. This is one of the first things any security benchmarks tell you to switch off
Fwe should prompt on logout to delete imedietly or delete later
Fdisabled by default but an option should be available
Fwe should also include an option to securely erase guest login data
Fsimply for liability reaons
Fperhaps we could store the guest account in tempfs temporarily using the same tech used by live CDs
Fthat way we never have guest data written to disk in the first place
Fa shell script could pull that infomation from a user configurable location mount a partition as tempfs and set the users home there
Fdata is effectively gone after reboot
RCouldn't tmpfiles symlink /var/home/guest to /tmp, which is stored in memory IIRC (don't quote me on that)?
MOn reboot would be a tmpfs solution.
The on logout method would be most likely a oneshot user service to nuke the contents of workdir and upper dir when the user service shutdowns. Having it ask you to delete now or later would be a complication.
Have a creation command makes sense.
The on logout method would be most likely a oneshot user service to nuke the contents of workdir and upper dir when the user service shutdowns. Having it ask you to delete now or later would be a complication.
Have a creation command makes sense.
MEffectively that would be the plan. But have some files persist like skel items and if we have any configurations. Since it will be a lower dir it will be read-only
MLike the guest account should probably have a .bashrc
