[Info-vax] prevent user login during and after startup
Craig A. Berry
craigberry at nospam.mac.com
Wed Sep 17 23:29:27 EDT 2014
On 9/17/14, 1:24 PM, Stephen Hoffman wrote:
> Get rid of OPER, and this particular problem goes away. Possibly some
> other problems, too, depending on what else OPER is being (mis)used for.
One way to do that would be to allow specific users to impersonate an
account with OPER privilege, using, for example Jonathan Ridler's JUMP
utility, which can (if you want) log every keystroke executed while
under impersonation and otherwise monitor what's going on with the
impersonated account and who's doing the impersonation.
The key point for the OP's particular problem is that they would have to
log into their own accounts first and could only acquire OPER privilege
via a separate step, so until they are already logged in they are just
non-privileged users and can be locked out via normal means.
More information about the Info-vax
mailing list