Re: [SAGE] Security tokens

[Jim Hickstein <jxh@jxh.com>]

> This doesn't handle the nuisance users who will use the one-time access
> to set up a reverse telnet or something.

Point.

Fortunately I don't have to worry too much about that.  The example I cited 
was giving temporary access to another sysadmin (a peer), so trust wasn't a 
problem.  And my run-of-the-mill users aren't going to figure out either 
end of the above gambit on their own.

And yes, certain things (like "sudo /bin/sh") are considered <i>prima 
facie</i> acts of wrongdoing, meaning that I can convince HR to take steps.