Tony Nelson wrote: > At 2:25 AM -0600 9/25/07, Frank Cox wrote: >> On Tue, 25 Sep 2007 01:19:51 -0700 >> Brian Mury <brianmury@xxxxxxxxxxxxxx> wrote: >> >>> That would work, so long as the user doesn't modify ~/.bash_logout. >> chown root.root .bash_logout >> chmod 444 .bash_logout >> cp .bash_logout /etc/skel >> >> You're off to the races. > > The user can just rm .bash_logout and make a new one. Try it. > > I suspect a working answer might involve PAM, session, and pam_exec. Dumb question - can you set PAM to run something when the user logs out? Everything I have seen using PAM is when you try to to do something, and PAM uses rules to see if you can do it. But the application has to ask for authentication. I do not see what would be calling PAM. logout is a Bash built-in command - I believe it is the same for other shells. The same thing for exit. For csh, you can put commands in /etc/csh.logout. I do not see the equivalent system-wide script for bash. Mikkel -- Do not meddle in the affairs of dragons, for thou art crunchy and taste good with Ketchup!
Attachment:
signature.asc
Description: OpenPGP digital signature
