At 1:29 PM -0500 9/25/07, Mikkel L. Ellertson wrote: >Tony Nelson wrote: >> At 2:25 AM -0600 9/25/07, Frank Cox wrote: >>> On Tue, 25 Sep 2007 01:19:51 -0700 >>> Brian Mury <brianmury@xxxxxxxxxxxxxx> wrote: >>> >>>> That would work, so long as the user doesn't modify ~/.bash_logout. >>> chown root.root .bash_logout >>> chmod 444 .bash_logout >>> cp .bash_logout /etc/skel >>> >>> You're off to the races. >> >> The user can just rm .bash_logout and make a new one. Try it. >> >> I suspect a working answer might involve PAM, session, and pam_exec. > >Dumb question - can you set PAM to run something when the user logs >out? Everything I have seen using PAM is when you try to to do >something, and PAM uses rules to see if you can do it. But the >application has to ask for authentication. I do not see what would >be calling PAM. logout is a Bash built-in command - I believe it is >the same for other shells. The same thing for exit. I think so. From the source, pam_exec runs the command on both open session and close session. I don't see how to distinguish between the two, or know for sure that it is called on close session. The SAG says that "session ...things that need to be done for the user before/after they can be given service. ...opening/closing...". -- ____________________________________________________________________ TonyN.:' <mailto:tonynelson@xxxxxxxxxxxxxxxxx> ' <http://www.georgeanelson.com/>
