Good idea about getting the idle time from the w command in the .bash_logout. However again that would be relying on a file that the user can modify (their own .bash_logout file). That is unless you were to chmod the .bash_profile and .bash_logout to give execute only access to the user. Then they cannot override or change the settings in .bash_profile, or change the w command in the .bash_logout. You could either automatically output the w command to a log file, or put the bash script code in the .bash_logout to do the calculations and only make an entry in a log if the timeout scenario was applicable. I'm guessing the user only needs to be able to execute those files, not read or write it. Jacques B.
