But the user still has a small window of time to do something we he logs in. You must run this script in an infinite loop as Fastolfe mentioned, POLLING, no worse, and grepping something. If CDE was hanging with SIGKILL, then you should have tried a different signal, perhaps SIGQUIT. You have to run this wasteful script for as long as you want to block the user. I can imagine that this script is eating an unusual amount of processing time when all you need to do is block them from telnetting in, not killing their processes when you see one. This is very inefficient and unsafe code.

AgentM Systems nor Nasca Enterprises nor Bone::Easy nor Macperl is responsible for the comments made by AgentM. Remember, you can build any logical system with NOR.