On Tue, Apr 13, 2010 at 8:36 AM, Robert Nesius <nesius at gmail.com> wrote: > > Why not just set their shell to a stub-shell that only allows them to > run the passwd command, or allows them to log out? I was just going to recommend this as well. Look into Restricted shell (rsh). I've used it in the past for this sort of thing, and it worked well. -Erik