Ask Slashdot: Ubuntu Lockdown Options? 387
First time accepted submitter clava writes "We have a desktop Java testing application that is going to be administering tests to students on lab computers running Ubuntu 10.x. These computers are used by the students for other purposes and we're not allowed to create special users or change the OS configuration. When the testing app is launched, we need to restrict users from exiting the app so they can't do things like search the internet for answers or use other applications. Is there a good way to put an Ubuntu machine in kiosk mode or something via our application and have exiting kiosk mode be password protected? Any ideas are appreciated."
Why? (Score:4, Insightful)
Why not let them use resources? Similar to what they will have available to them in the workforce.
Re:Why? (Score:4, Insightful)
Because they're supposed to learn and internalize the concepts, not learn how to type search terms into Google or trade answers via IM.
Chortle! (Score:5, Insightful)
Pull out the Ethernet connection. TADA!
Re:Why? (Score:5, Insightful)
Firstly the submitter didn't say if this was a programming exam, or what it was. It could be a test on memorising the capitals of African countries.
But more importantly is that allowing access to the internet doesn't just allow things like documentation, and other resources I might have in the workplace, but might allow me to ask my friend to email the entire solution, or even send the question to a guy in India and get the solution back for a fee. It's a comprimise between testing some memorisation and in the cases of some students, testing nothing at all.
Make the test application enforce Kiosk mode (Score:3, Insightful)
Re:Homework (Score:5, Insightful)
Hey, asshole. Ever occurred to you that, given clava's high UID, he/she isn't a geek and don't know enough of Linux/technology to do this? Look at how this question was redacted: it's obvious that he/she is not in control of the system, and is looking for some info here, where people with knowledge gather. Just answer the question if you can help and don't be pompous.
Re:Homework (Score:3, Insightful)
WTF Man. Maybe they are a math/english/whatever teacher using some sort automated grading system. Maybe they're a good teacher but bad with computers? But NO! Unless you crafted it yourself bit by bit then its tantamount to "cheating".
Re:Depends how locked-down (Score:5, Insightful)
If you ask me, you don't really need to prevent users from doing those things. You just need to tell they're not allowed to, and then have your java app detect if those things have occurred and then take action from there. By "take action," I mean that you could either (a) make some kind of notation in the database so that you can penalize them, or (b) send an SMS message or email or something to the test administrator to alert them of the situation so that they can walk over and determine if the student is attempting to cheat.
Re:Depends how locked-down (Score:3, Insightful)
This can be done.
1. Insert a Windows 7 CD, format the drive, install the Windows 7 operating system. Via group policies and TweakUI, disable all settings and applications that you don't want users to access.
2. Take the Ubuntu CD and place it on the desk next the computer.
3. Place hot beverage of choice on Ubuntu CD, which will now be reffered to as the "coaster".
4. Proceed with Java tests.
Re:Why? (Score:5, Insightful)
I guess you want that EMT to show up at your car crash to just google how to patch you up if he didn't pay attention in class. Better hope he doesn't lose signal to his cell phone.
Finally - PROFIT. (Score:4, Insightful)
2. Blatantly cheat and get caught.
3. Become the proctor, and ignore everyone now cheating.
turn the problem upside down (Score:3, Insightful)
Re:Why? (Score:2, Insightful)
Because somebody needs to provide those answers you find via Google. They don't just appear out of nowhere.
Re:Why? (Score:3, Insightful)
My college grades were much better, but only because I learned at my own pace, on my own terms. You think that some Adderall-popping punk who gets good grades forgetting everything they've learned after each final would make a "top-flight" employee? Could you possibly imagine that some people actually have lives, other priorities that don't revolve around serving their school and, later, their employer?
"Top-flight" employees indeed. What you want is a predictable, cocksucking slave who will not have the passion or imagination to be a threat to you after you hire them.
Requires things he said he couldn't do (Score:4, Insightful)
This is exactly the solution I would have proposed, except it goes against the users requirements.
Disabling TTY access requires changes to the OS configuration which he is not allowed to make. Furthermore in Ubuntu, you can't just kill the current X session and start a new one from the command line with the application as the window manager, because it will helpfully restart X when it crashes (or is intentionally killed). You would either need to create a special user whose default WM is the application you want to run, or you would need to reconfigure the OS graphical login settings, neither of which he is allowed to do.
User applications are intentionally prevented from locking down a machine, otherwise any old piece of malware could do so. The only way to really lock it down to modify the OS configuration. That is why all the other answers are suggesting round-about ways to achieve the same goal. IMHO adamdoyle [slashdot.org]'s is the best.
Re:MOD PARENT UP (Score:5, Insightful)
This happens everywhere on the internets where you ask a question. Ask a Microsoft support website how to do something that "should" be possible, but isn't. (Can't think of an example now) You'll get 10 answers telling you how to "work around" what you asked, and another 20 answers questioning why you or any one else would want to do this thing. What you will never ever get is even 1 person saying "Our product cannot do this thing".
Re:Why? (Score:5, Insightful)
However, the professors wouldn't in a million years consider making these tests open-internet. The internet allows answers to be shared, which doesn't allow for testing of individual students. In addition, the internet has a lot more information than in a textbook. A student may be able to find problems almost identical to those on the exam and simply copy the answer verbatim.
There's also a difference between being able to do your work with the assistance of a reference manual, and only being able to do your job if you have access to the internet.
Re:Depends how locked-down (Score:3, Insightful)
*Nix at least has always had a meaningful modular approach. Both Operating systems can be exploited, but *Nix has better granularity and privilege escalation safeguards. The fact that submitter is mentioning Ubuntu says a lot, as it is the "Windows" of Linux.
Replying to Culture20 above you, regedit hacks are the same thing that is wrong with the current state of Linux usability. If you have to resort to that to do what you said, then you might as well run *Nix with less hassle. Also, why did Microsoft make it that difficult to replace IE?
Re:Depends how locked-down (Score:4, Insightful)
you could straight up disable the keyboard and rely on the mouse for selecting answers.
Which doesn't help in cases of 1. answers that aren't multiple choice, or 2. having to accommodate people with mobility impairments where limitation to a mouse imposes an undue hardship.
Comment removed (Score:3, Insightful)
Re:Depends how locked-down (Score:5, Insightful)
you could straight up disable the keyboard and rely on the mouse for selecting answers.
Which doesn't help in cases of 1. answers that aren't multiple choice, or 2. having to accommodate people with mobility impairments where limitation to a mouse imposes an undue hardship.
Be fair, the restrictions on the implementation are severe: No OS mods one can kind of understand but you also can't create even a "testtaker" user account? As an OS deployment engineer I appreciate the former but I can't think of any justification for the latter.
Anyway, given these handcuffs, a multiple-choice test will just have to do I think. And believe me, you can make some pretty darn hard multiple-choice exams. Go try to get MS or Apple certified some time. 80 adaptive multiple choice questions that nobody is going to do well at unless they studied hard and/or know their stuff.
Ubuntu locked down for a school environment (Score:3, Insightful)
I worked on this project for a Primary school. It's worked well for >2 years for 120 pupils.
http://linuxcentre.net/wiki/ [linuxcentre.net]
The parts about automatically resetting the homedir after reboot is probably of interest to you.
http://linuxcentre.net/wiki/index.php/Detailed_Maverick_Meerkat_OS_Netbook_Customisation [linuxcentre.net] below Home_Directory_Synchronisation