ubuntuusers.de

#!/bin/sh
# the username to protect
USERNAME="kiosk"
# disable hardlink restrictions
echo "kernel.yama.protected_nonaccess_hardlinks=0" | sudo tee /etc/sysctl.d/60-hardlink-restrictions-disabled.conf
# create directory to store aufs data in
sudo install -d -o $USERNAME -g $USERNAME /home/.${USERNAME}_rw
# set up the mount
echo "none /home/${USERNAME} aufs br:/home/.${USERNAME}_rw:/home/${USERNAME} 0 0" | sudo tee -a /etc/fstab

# create lightdm settings to run our cleanup script, disable guests and enable manual login (for uids < 1000)
sudo tee /etc/lightdm/lightdm.conf > /dev/null <<-EOFA
	[SeatDefaults]
	user-session=ubuntu
	greeter-session=unity-greeter
	allow-guest=false
	greeter-show-manual-login=true
	greeter-setup-script=/usr/local/bin/cleanup.sh login
	session-cleanup-script=/usr/local/bin/cleanup.sh logout
EOFA

# change rc.local to run cleanup script
sudo tee /etc/rc.local > /dev/null <<-EOFB
	#!/bin/sh -e
	/usr/local/bin/cleanup.sh \$0
	exit 0
EOFB

# cleanup script to clear aufs filesystem
sudo tee /usr/local/bin/cleanup.sh > /dev/null <<-\$EOFC
	#!/bin/sh
	# only run when aufs is mounted
	test -n `mount -l -t aufs` || exit 0;

	# delete function to clear out aufs with exceptions
	delete (){
	  # find arguments to exclude aufs objects
	  no_aufs="! -name '.wh*'"
	  # extra find arguments
	  more="$1"
	  #securely delete
	  cd /home/.kiosk_rw && find . -maxdepth 1 -mindepth 1 $no_aufs $more -print0|xargs -0 rm -rf
	}

	case "$1" in
	  login)
	    test $LOGNAME = "kiosk" && delete "! -name .pulse"
	    ;;
	  logout)
	    # delete with delay
	    test $LOGNAME = "kiosk" && (sleep 3; delete "! -name .pulse") &
	    ;;
	  /etc/rc.local)
	    delete
	    ;;
	  *)
	    ;;
	esac
	exit 0
$EOFC
# set correct username in cleanup.sh
sed -i "s/kiosk/$USERNAME/g" /usr/local/bin/cleanup.sh
sudo chmod 754 /usr/local/bin/cleanup.sh

#!/bin/sh
### BEGIN INIT INFO
# Provides: Home-Dir-Resetter
# Required-Start: $syslog $remote_fs
# Required-Stop: $syslog $remote_fs
# Default-Start: 2
# Default-Stop:
# Description: Reset home direction after boot ©-2013 by Armin Jacob & Anton Bracke
### END INIT INFO
 
### BEGIN INIT TODO ADJUST
USER=student
TMPDIR=/home/.saves
### END INIT TODO ADJUST
 
case "$1" in
     start)
         if[ -d $TMPDIR$USER]
         then
         sudo rm -r -f /home/$USER
         sudo cp -a -r -f $TMPDIR/$USER /home/
         sudo chown -R $USER:users /home/$USER
         sudo rm -r -f /tmp/*
         echo "The user-home-dir from $USER is now resetted!"
         else
         echo "$TMPDIR$USER does not exist! For safety reasons, the script has not been executed!"
         fi
         ;;
     save)
         if[ -d $TMPDIR$USER]
         then
         sudo rm -r $TMPDIR/$USER
         fi
         sudo mkdir -p $TMPDIR/$USER
         sudo cp -r -f /home/$USER /home/.saves
         if[ -d $TMPDIR$USER]
         then
         echo "The user-home-dir from $USER was saved!"
         else
         echo "Unfortunately, the backup operation was unsuccessful. Please repeat the command!"
         fi
         ;;
      *)
         echo "Usage: $0 {start|save}"
         exit 1
         ;;
esac
exit 0

#!/bin/sh
### BEGIN INIT INFO
# Provides: Home-Dir-Resetter
# Required-Start: $syslog $remote_fs
# Required-Stop: $syslog $remote_fs
# Default-Start: 2
# Default-Stop:
# Description: Reset home direction of a user after boot written by Armin Jacob & Anton Bracke
# License: This script is licensed under GNU GPL.
### END INIT INFO
 
### BEGIN INIT TODO ADJUST
USER=student
TMPDIR=/home/.saves
### END INIT TODO ADJUST
 
case "$1" in
     start)
         if[ -d $TMPDIR$USER]
         then
         sudo rm -r -f /home/$USER
         sudo cp -a -r -f $TMPDIR/$USER /home/
         sudo chown -R $USER:users /home/$USER
         sudo rm -r -f /tmp/*
         echo "The user-home-dir from $USER is now resetted!"
         else
         echo "$TMPDIR$USER does not exist! For safety reasons, the script has not been executed!"
         fi
         ;;
     save)
         if[ -d $TMPDIR$USER]
         then
         sudo rm -r $TMPDIR/$USER
         fi
         sudo mkdir -p $TMPDIR/$USER
         sudo cp -r -f /home/$USER /home/.saves
         if[ -d $TMPDIR$USER]
         then
         echo "The user-home-dir from $USER was saved!"
         else
         echo "Unfortunately, the backup operation was unsuccessful. Please repeat the command!"
         fi
         ;;
      *)
         echo "Usage: $0 {start|save}"
         exit 1
         ;;
esac
exit 0