[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: shutdown user and accountability



Do you have any source of information about the employees?  HR
database or something like that?  You could cobble together a setuid
Perl or C program that asks them information only they would know to
authenticate them, verifies it, logs it, and then does a shutdown.
Set up a guest account with minimal privileges except for the ability
to run that program, and put the login name and password on the
keyboard.

Even if you don't have the info in the database, you could at least
ask them a question only they would know, log it, and then after the
fact if you want to find out who it was you could confirm it that way.

It's not perfect, but given the policies you have to live with, it may
be the only type of solution you can come up with.

--Bill.

-- 
William R Ward            bill@wards.net          http://www.wards.net/~bill/
-----------------------------------------------------------------------------
     If you're not part of the solution, you're part of the precipitate.



Reply to: