Hi All,
I picked up from all the suggestions above. Many thanks community!!!
This is what I did:
- created user “kiosk” as standard user
- set up autologin for kiosk (both points can be done in KDE System Settings)
- optional: set up my wlan and vpn usable for all the users
- reboot (only to check autlogin works fine)
- in System Settings set autostart firefox (know I’m the user kiosk)
- open konsole
- chmod 555 of all visible directories (I kept all the “invisble” dirs as they were)
- chmod 555 . (home dir also readonly)
- cd .config/plasma-workspace/env
- create a file whatevername.sh
- edit the file and insert one line: export KDE_HOME_READONLY=1
- run menu editor and remove all the applications → menu wil be empty
Solution need improvements:
a) a user knowledgeable of linux knows how to acces “.dirs”, that are still not protected
b) I still need to find a way to “lock” bookmarks
c) only menus are empty, all installed app still can be run from “start”, if one know the names
… I’m lucky, nobody else has knowldge in the family of unix/linux … for now solution is acceptable!
Thanks all