Is it a good practice to have different users for different contexts

multiuserusers

I'm a software developer and I have a new laptop with Ubuntu.

I plan to set up this laptop as a development workstation where I'll do my professional work (for my company) and also I'll develop some personal/home software.

I want to have my professional stuff (applications, software libraries, configurations, etc.) separate (as much as possible, in terms of tydiness, for example, unity launchers, application settings, apps at startup, broswer settings, etc. If I switch from one user to another it has to look like different environments) from my personal stuff.

So I think having separate users for separate contexts: one user for professional work and another user for personal work (and a guest user too). But I'll have two users for only one person (only I use this laptop).

It's not a big problem, but, is it a good practice to have different users for different contexts? Is there a better way to solve this issue?

Best Answer

Absolutely!

From a security perspective separation is a Good Thing (tm) - as your professional and personal usage may have very different risk profiles.

At work you may deal with code for clients, personal data for thousands of individuals, configuration of network devices etc., and that usage may be regulated (depending on your industry, employer, or clients)

At home you may be a bit more relaxed, watching videos, downloading games etc.

Without separation, you run risks which include:

  • Allowing a compromised executable that you pick up at home compromising your work environment.

  • Accidentally doing something in your professional environment while you think you are in your personal environment - this happens a lot, and one of the workarounds where separation of accounts isn't possible is to have environments well labelled (eg by a different prompt, or coloured background)

In reality it also makes a lot of sense to have separation of accounts used for development and production environments, so we do see this in major enterprises.

Related Question