Opened 11 years ago

Closed 11 years ago

#83 closed defect (fixed)

xkiosk should purge session

Reported by: jrollins Owned by: jrollins
Priority: major Component: debirf
Keywords: Cc:
Sensitive: no


It just occurred to me that the xkiosk module does not ever purge the user's session. If the browser is quit, it is immediately respawned by runit, but the previous session remains, including (i believe) cookies, history, etc.. I haven't tested this, but since we're not explicitly purging the previous session, i don't see how it wouldn't still be there. Seems to me the way to do this is to write a runit ./finish script that does the necessary purging.

It would also be nice to somehow inform the user that the way to exit and purge the session is by quitting the browser. not sure what the best way to do that would be, although a custom start page might be a cool way to do it.

we should probably also consider having the session automatically close/purge after a certain amount of time of inactivity, but i don't have a good idea of how to measure activity. (this should probably be a separate ticket).

Change History (3)

comment:1 Changed 11 years ago by Daniel Kahn Gillmor

I agree that a ./finish script is the way to go to clear the session. Seems like the simplest thing to do is just to do something like:

rm -rf ~guest
cp -r /etc/skel ~guest
chown -R guest:guest ~guest

comment:2 Changed 11 years ago by jrollins

this is fixed in r952 (0.16-1). i added a finish script identical to dkg's suggestion, and moved the custom xinitrc to the system-wide location so the session purge doesn't wipe it. i also added a new html start page with instructions on how to quit the session. oh, and i tested it, and it works.

comment:3 Changed 11 years ago by jrollins

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.