On Thu, Oct 14, 2010 at 06:17:23PM -0400, Brad Tilley wrote: > I thought about doing that too. I need to test it more to see what > happens when ksh is the shell and the user executes csh manually. I > suppose ksh will still honor TMOUT in that case.
TMOUT is at most a convenience, not a security measure: $ TMOUT=600 $ readonly TMOUT $ exec perl -e 'delete $ENV{TMOUT} ; exec "/bin/ksh";' $ echo $TMOUT 0 $ -- Jurjen Oskam Savage's Law of Expediency: You want it bad, you'll get it bad.