My Boss wants me to setup a Linux box to act as a kiosk, limiting web browsing to our domain and one or two others. Squid running locally works fine for this, but I'm worried about the preferences in Mozilla, since a user could change them on the fly. Of course, I can make the file read-only, but that won't help the prefs in memory.

Anyone know how I can either always force web traffic thru squid on localhost, or how to keep the Mozilla preferences from being edited while Mozilla is up?