On 2012-12-16, David Coppa <dco...@gmail.com> wrote: >> .profile can be interrupted with ctrl+c. > >>>> Because it is under controle or the user and he/she can disable >>>> such funcionality. > > the safer way imho is patching ksh
Wouldn't it be better to use an ssh forced command, which then looks up the users desired shell (or other command called directly from ssh) and wraps it in a logger?