I'm looking to put a box at a client site which will be connected to the client's home router for internet.
That box will have remote access software on it and will have untrustworthy contractors logging in and using the browser. So, I'm looking for a distro that would be LOCKED DOWN to the max from the user side.
Regardless of the distro I'm planning on blocking all possible applications, (especially the terminal) leaving only the browser accessible. Blocking all the ports and all the domains aside from the 2 that the user/contractor should access. The user will have non-admin privileges of course.
So, taking all that into consideration, is there a distro that somehow facilitates being locked down from within, to minimize the possible attack surface?
That's a home network we're talking about, so I'm considering security VERY seriously.
Can the security even be guaranteed to a certain extent with this setup, should I even go ahead with this project?
Any and all other possible security tweaks are definitely welcome, I'm a newbie so everything and all is new to me.
Guys, your thoughts are greatly appreciated!
Thank you beforehand!