if you are letting someone have a quick browse on your computer you can give them a guest session.
on ubuntu this is very easy. click the session menu (the one with log out and shutdown), and choose guest session. it creates a guest user, with limited privileges (eg. they can only read a small white list of the filesystem), and logs them into an X session. when they log out it deletes their temporary home folder. it is pretty hard for them to do anything bad from it.
Posted May 28, 2010 20:36 UTC (Fri) by Russ.Dill@gmail.com (subscriber, #52805)
[Link]
Yes, that in combination with the ~/Private provides a low impact solution. It should really be easier or more automated, but it is still pretty easy to utilize: