On Thu, Oct 14, 2010 at 06:17:23PM -0400, Brad Tilley wrote:

> I thought about doing that too. I need to test it more to see what
> happens when ksh is the shell and the user executes csh manually. I
> suppose ksh will still honor TMOUT in that case.

TMOUT is at most a convenience, not a security measure:

$ TMOUT=600
$ readonly TMOUT
$ exec perl -e 'delete $ENV{TMOUT} ; exec "/bin/ksh";'
$ echo $TMOUT
0
$ 

-- 
Jurjen Oskam

Savage's Law of Expediency:
        You want it bad, you'll get it bad.

Reply via email to