How to prevent steam running for some users

My son has an account our home computer (manjaro kde) as a standard user. He runs steam for gaming and I have a time keeper on his account so he does not spend his whole life gaming. He has many classes at home now because of the COVID second wave and I have created another account for him for his school work and so that it does not use his gaming time while attending online classes. The problem is of course that he can now run steam from this new account too and gets around the time keeper.

The question:

How do I prevent a particular user from running particular programs (steam in this particular case)?

Theres a number of ways.
This one shows basically how to start with restricting everything except a few commands:

And this is one way to restrict access of some commands (using groups) :

I feel like there are probably some other novel ways like aliases and firejail or firewall or similar.

1 Like