[K12OSN] restricting access to games in k12ltsp4

[Patrick Healy <phealy surf dsusd k12 ca us>]

I'm looking to restrict access to the installed games.

My plan is to change group ownership of installed binaries to the
existing group "games" (GID 20).  Then I'll add the users that I want to
be able to play games to this group, while removing execution
permissions to others.  

Below is the script I plan to use.

Questions:

1) is adding regular users to group #20 "games" a security risk?
2) did I miss any files I'll want to restrict?

Thanks.

Pat Healy
Palm Desert High School

#!/bin/bash
# remove ability for users to execute games:
chmod o-x `rpm -ql kdegames|grep bin`
chmod o-x `rpm -ql gnome-games|grep bin`
chmod o-x `rpm -ql xboard|grep bin`
chmod o-x `rpm -ql chromium|grep bin`
chmod o-x `rpm -ql freeciv|grep bin`
chmod o-x `rpm -ql gcompris|grep bin`
chmod o-x `rpm -ql glife|grep bin`
chmod o-x `rpm -ql tuxracer|grep bin`
# change group to "games" for game programs:
chown .games `rpm -ql kdegames|grep bin`
chown .games `rpm -ql gnome-games|grep bin`
chown .games `rpm -ql xboard|grep bin`
chown .games `rpm -ql chromium|grep bin`
chown .games `rpm -ql freeciv|grep bin`
chown .games `rpm -ql gcompris|grep bin`
chown .games `rpm -ql glife|grep bin`
chown .games `rpm -ql tuxracer|grep bin`