🚀 go-pugleaf

Olaf> == Olaf Titz <S_TITZ@iravcl.ira.uka.de> 

 Princeton> 8.  You must not prevent others from using shared resources
 Princeton> by running unattended processes or placing signs on devices
 Princeton> to "reserve" them without authorization. Your absence from a
 Princeton> public computer or workstation should be no longer than
 Princeton> warranted by a visit to the nearest restroom. A device
 Princeton> unattended for more than ten minutes may be assumed to be
 Princeton> available for use, and any process running on that device
 Princeton> terminated. You must not lock a workstation or computer
 Princeton> which is in a public facility.

 Olaf> This means: 'If you must go to the restroom you HAVE to leave the
 Olaf> terminal open, so that other users can terminate your session if
 Olaf> they need the machine.' This is IMO simply unacceptable. Other
 Olaf> policies would REQUIRE to lock the terminal to prevent tampering
 Olaf> with your account.

MIT's Athena workstation policy is that you can lock it for no more than
20 minutes before someone can feel free to reboot it or otherwise
"forcibly unlock" it.  The "standard" screenlocker has a displayed timer
of "how long I've been locked".

Perhaps Princeton could provide a similar one with a button (cleaner
than a reboot, especially since MIT Athena workstation can't have rlogin
users ;-) that would only appear after N minutes, saying "break lock and
kill X server".  This would protect accounts while keeping workstation
resources available.
--
Christopher Davis   | ]CALL -151       
<ckd@eff.org>       | *300: 20 DD FB 60
System Administrator| *3D0G            
EFF +1 617 864 0665 | ]CALL 768