Let’s say I want to enforce certain settings, such as the use of a proxy in network settings for certain users.

Isn’t this easily bypassable by for example by installing TOR browser or using a VPN app in the user space?

How does system mangers can be sure users will only use the system as planned by the sysadmin? I’m especially interested in network settings, but in general I would be interested to know more about this/be pointed towards the right direction.

Thank you!

  • vsouzas
    101·
    18 hours ago

    Mounting home and temp partitions with noexec should prevent that.

    • lengau@midwest.social
      7·
      16 hours ago

      Many electron apps will break because they install some executables into ~/. config

      So double win!