AnotterKiosk
AnotterKiosk copied to clipboard
Manawyrm
Just an-otter kiosk OS for Raspberry Pis and x86 PCs
Whenever I try to boot AnotterKiosk on any device with an NVIDIA GPU, it just hangs on a blinking white cursor on a blank, black background. It boots just fine...
Hello, Thank you for this project. Hope you continue it and add features to make it the best. I was thinking if you could consider doing a version of AnotterKiosk...
[bubblewrap](https://github.com/containers/bubblewrap) is a nice little sandboxing tool, which (amongst other things) allows users to filter syscalls of a process. The Chromium process could be limited to a very small number...
From Linux 6.6, it's possible to disable io_uring with a new kernel sysctl. https://www.phoronix.com/news/Linux-6.6-sysctl-IO_uring This will take a while until it's available in Debian and the Raspberry Pi kernel. https://www.phoronix.com/news/Google-Restricting-IO_uring
Currently, the www-data user (and nginx/webserver) is being able to sudo to the root user. This still requires an exploit in the (relatively small amount of) PHP code on the...
Having a hardened network mode for untrusted networks, where things like SSH being reachable from the network (instead of only via autossh) are disabled might be useful. See https://github.com/Manawyrm/AnotterKiosk/issues/2#issuecomment-1639644032