Disable Guest Access by default.

[Nathan Hartley]

"Guest Access" should be disabled by default. It is an unexpected "feature", on an otherwise secure system. Until a GUI option is added (https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/886415), it is also an un-intuitive feature to disable.

I've found it only invites trouble. For me, trouble had the face of my children while I was at work. =) They found that they were able to use my laptop, without logging in.

Then on their PC they found that, while logged into their account, using the "Guest Access" bypassed the proxy settings setup in their Firefox profile.

Please consider defaulting both pre-logon and post-logon Guest Access to off.

[Gunnar Hjalmarsson (gunnarhj)]

The guest session have been enabled by default since 10.04, and with that the feature got much more exposure than otherwise would have been the case. So I'd vote for keeping it enabled by default.

There is an easy to follow instruction how to disable the feature (and enable it again):

https://help.ubuntu.com/stable/ubuntu-help/shell-guest-session.html#disable

A GUI control (bug #886415) for disabling/enabling guest session will make it even easier for system owners to disable the feature. IMO an implementation of such a control would be reasonable trade off between different views here.

[AsciiWolf (asciiwolf)]

I think there _definitely_ should be a user-friendly way implemented to disable the Guest Account.

[AsciiWolf (asciiwolf)]

Looks like this issue is finally "fixed" in Ubuntu 17.10 where the guest session is no longer available.

[Rolf Leggewie (r0lf)]

Guest sessions have been disabled -> bug 1663157

But might become enabled again when bug 1742912 has been dealt with