If you're a parent running Linux at home, you've probably discovered that parental control options are surprisingly limited. The mainstream parental control tools — Bark, Qustodio, Net Nanny — have weak or non-existent Linux support. The open-source options are often incomplete, poorly documented, or require installing software that your child can easily disable.
I'm a technologist and parent. I run Ubuntu at home, and my kids have their own Linux machines. I've tried every Linux-compatible parental control solution I could find, and I built Leassh because none of them actually solved the problem: understanding what your child is doing on their computer without installing spyware.
Here's what actually works for Linux screen time monitoring in 2026.
The Linux parental control problem
Most parental control software is designed for Windows and macOS first, with Linux as an afterthought. Here's what I found when researching Linux options:
- Commercial tools: Bark, Qustodio, Net Nanny, K9 Web Protection — either no Linux support or extremely limited functionality
- Open-source options: Often incomplete, abandoned, or require root access that kids can circumvent
- Time-limit tools: Some work (like
timeoutscripts), but only enforce limits — they don't tell you what your child was doing during that time - Screen capture: Available but raises serious privacy concerns and is easily blocked
The gap: Linux parents have two choices: no monitoring at all, or installing software that requires root access and can be disabled by tech-savvy kids. Neither option is acceptable.
What actually works on Linux
1. SSH-based monitoring (Leassh's approach)
Here's the key insight: Linux already has a built-in remote monitoring protocol — SSH. Every Ubuntu, Fedora, Debian, and most other Linux distributions have SSH enabled by default or can enable it with one command:
sudo apt install openssh-server sudo systemctl enable --now ssh
Once SSH is enabled, you can monitor what's running on the system without installing anything. The Linux process table (ps) tells you exactly which applications were running, when, and for how long. SSH lets you query this remotely without touching the user session.
Leassh uses this approach. It connects to your child's Linux machine via SSH, queries the process history, and tells you what they were doing — not just how long they were on the computer.
2. Native Linux tools (for DIY parents)
If you want to roll your own solution, here are some options:
# View current processes ps aux # View process history (requires auditd) sudo ausearch -c firefox # Monitor command execution (requires auditd) sudo auditctl -a exit,always -F arch=b64 -S execve
These tools work, but they require significant setup and ongoing maintenance. They also only give you raw data — no narrative reports, no weekly summaries, no insight into what your child was actually building or learning.
Why commercial parental controls fail on Linux
Let's be honest about why the big parental control companies don't support Linux well:
- Market size: Linux desktop market share is still small (maybe 3-4% of home desktops). Their ROI calculation doesn't justify heavy Linux development.
- Installation friction: Most commercial tools require installing a persistent agent with root privileges. On Linux, this is more visible and more easily removed than on Windows or macOS.
- Fragmentation: Linux distributions vary wildly in their package managers, desktop environments, and system architectures. What works on Ubuntu might not work on Fedora or Arch.
The result: Linux parents are left with subpar options or forced to use Windows/macOS-focused tools that don't work on their primary computing platform.
Leassh for Linux: The practical solution
Leassh is designed with Linux first. Here's how it works:
Setup (takes 5 minutes)
- Enable SSH on your child's Linux machine (if not already enabled)
- Create a dedicated monitoring user (or use an existing one)
- Add the SSH credentials to Leassh configuration
- Done
# Example: Create a monitoring user (optional) sudo adduser leassh-monitor sudo usermod -aG sudo leassh-monitor # Enable SSH sudo apt install openssh-server sudo systemctl enable --now ssh # Get the machine's IP address hostname -I
What you get
- Process monitoring: See which applications were running, at what times, and for how long
- Weekly narrative reports: Leassh analyzes the patterns and tells you what your child has been working on — "Emma spent 12 hours this week learning Python, building a simple calculator app"
- Local privacy: All monitoring data stays on your home network. You can run Leassh entirely locally with no cloud sync.
- No installation on target: Your child doesn't need to install anything. The monitoring happens via SSH from the Leassh agent.
Technical details for the curious
For parents who want to understand exactly how this works under the hood:
Process history collection
Linux tracks process information in several places:
psoutput: Real-time process list with start times/proc/[pid]/directories: Detailed process information including command lines, environment variables, and timing- Shell history:
~/.bash_historyor~/.zsh_historyshows commands run (but can be cleared) - auditd: System audit framework that can log all process executions (requires configuration)
Leassh queries /proc and uses ps history to build a timeline of what was running. It doesn't rely on shell history (which is easily manipulated) — it looks at what the OS actually executed.
Privacy considerations
SSH-based monitoring is inherently more private than agent-based monitoring because:
- No persistent agent: Nothing runs on the target machine that could be tampered with
- Encrypted communication: SSH encrypts all data in transit
- Local-only option: You can run Leassh entirely on your home network with no cloud component
- Transparent: Your child can see exactly what SSH is querying (the process table) — there's no hidden data collection
Common questions
What if my kid disables SSH?
This is a legitimate concern. However:
- SSH requires root privileges to disable, which your child shouldn't have
- Even if they disable SSH, the Leassh agent will detect the connection failure and alert you
- The alternative (installing an agent) creates an adversarial dynamic where your child's goal is to disable the monitoring
With SSH-based monitoring, the relationship is different. You're not installing "spyware" — you're using a standard system protocol to query process information. It's transparent and can be discussed openly with your child.
Does this work for multiple machines?
Yes. Leassh is designed for fleets of machines. You can monitor:
- Your child's Ubuntu machine
- Your Fedora workstation
- Your partner's Debian laptop
- Even non-Linux machines (Windows via OpenSSH, macOS natively)
All data is aggregated into a single dashboard with activity timelines and weekly summaries.
What about Wayland vs X11?
SSH-based monitoring doesn't care about the display server. It queries process information at the OS level, which is independent of whether you're using Wayland, X11, or anything else.
Linux distributions tested
Leassh works on any Linux distribution with SSH available. Specifically tested on:
- Ubuntu 22.04 LTS, 24.04 LTS
- Fedora 38, 39, 40
- Debian 11, 12
- Linux Mint 21, 22
- Pop!_OS 22.04
- Arch Linux (manual setup required)
If your distribution has SSH available, Leassh should work out of the box.
The homelab angle
For parents who run homelabs (and many Linux parents do), Leassh has a bonus: it's essentially the same technology used for server monitoring. You can:
- Monitor your children's learning machines
- Monitor your homelab servers
- Get a unified view of all SSH-accessible devices
This is why Leassh's original design focused on fleet monitoring — the same SSH-based approach that works for monitoring 50 servers also works for monitoring 5 family machines.
Alternative approaches (and why they fail)
Screen capture
Tools like xvfb or screen capture scripts can take screenshots, but:
- They require root or special X11/Wayland permissions
- They're easily detected and blocked
- They raise serious privacy concerns (capturing passwords, private messages, etc.)
- They generate massive amounts of data with little insight
Network monitoring
Tools like Wireshark can monitor network traffic, but:
- They only see network activity, not local applications
- They require packet capture permissions
- Encrypted traffic (HTTPS) is useless for monitoring
- They're complex to set up and interpret
Parental control packages
Open-source options like parental or timekpr exist, but:
- They're focused on time limits, not understanding
- They require installation and configuration
- They're easily disabled by tech-savvy kids
- They don't provide behavioral insights or narrative reports
What I'd actually recommend
If you're a Linux parent:
- Enable SSH on all machines you want to monitor (usually already enabled on Ubuntu/Fedora)
- Use Leassh for process monitoring and behavioral insights
- Discuss the monitoring openly with your child — SSH-based monitoring is transparent and can be part of a conversation about digital responsibility
- Focus on understanding rather than restriction — the goal is to know what your child is learning and building, not just to limit time
The honest truth: Linux parental controls exist, but most are time-limit tools that don't tell you what your child was doing. If you want to understand rather than restrict, and you want a solution that doesn't require installing spyware, Leassh's SSH-based approach is the only practical option I've found.
Conclusion
Linux parents deserve better than "no monitoring" or "install this agent that your child can disable." SSH-based monitoring offers a third option: transparent, privacy-first, technically sound monitoring that respects both the parent's need for insight and the child's right to privacy.
The technology exists. It's been part of Linux since the 1990s. It just needed someone to build a user-friendly interface around it.
Further reading: How to Monitor Your Child's Computer Without Installing Spyware — the case for SSH-based monitoring. And Why SSH Monitoring Beats Consumer Apps for Family Technology — why the SSH approach is technically superior to agent-based monitoring.