I'm trying to create a guest account in arch linux that only allows the user to use simple applications like firefox. I do not want them to have access to programs like terminal or grub-customizer etc. How would I do this?
In the case of gnome - please use the following as a support in getting where you want to be.
Security Disable access to any command line
Ensure that the installation works as wanted before activating this
or ensure that one can log in as root with the right password. Preferably disable all access to command-line completely. Thus devices cannot be altered once installed except through chroot.
Disable user list at login screen
Disable repartitioning for the user
Disable altering settings
Disable the user from saving files:
Disable printing (such as from firefox or libreoffice)
No keyring package installed
You can also lockdown mozilla firefox settings - or at least you used to. Try googling the subject.
Yes basically the howto's from Ubuntu or Mint are the same way to go in Arch. Arch is more of a hands on development system. Not really intended as a stable release for a Kiosk type account. But it can be done. Get your chmod commands right and adduser and passwd settings right and test them.