Kiosk Modes

🚧 Documentation under development

The RidgeRun Platform Security Manual guide is currently under active development. Some sections may be incomplete or change without notice.

Questions? Contact RidgeRun or email to support@ridgerun.com.

RidgeRun Platform Security Manual from RidgeRun

Contents Pin

Kiosk Modes

Kiosk Mode is a system configuration approach that restricts the operation of an embedded device to a specific, predefined set of applications or user interactions. In this mode, the system boots directly into the designated application—often a graphical interface or a full-screen user-facing service—while blocking access to the underlying operating system, additional applications, or system settings.

Kiosk Modes are widely adopted in embedded, industrial, and commercial environments where the primary goal is to ensure a controlled and secure user experience. Typical use cases include:

Public terminals (e.g., information kiosks or ticketing machines)
Digital signage systems
Medical or industrial instrumentation
Point-of-sale (POS) devices
Appliances running headless or graphical interfaces

From a security perspective, kiosk configurations significantly reduce the system's attack surface by:

Preventing unauthorized access to the system shell or backend services
Disabling or restricting input devices and system shortcuts
Blocking access to networking or removable media unless explicitly allowed
Limiting the scope of what can be executed or modified by users

Implementing a kiosk mode typically involves:

Customizing the init system (e.g., systemd) to launch only the required services
Using display servers like Weston or X11 in restricted modes
Removing unused packages and disabling unnecessary login methods
Ensuring the application runs in full screen and automatically recovers from crashes

Kiosk mode is also a crucial step in achieving device hardening, especially when paired with secure boot, filesystem integrity checking, and strict access control policies. In systems where users interact with the hardware directly, enforcing a kiosk mode helps maintain system integrity, user privacy, and service continuity.

❯