[BBLISA] Single sign-on help requested

[Aaron Ball]

Sean OMeara wrote:
> By the way,  it's not really possible to restrict third party
> tools/apps/etc on the linux machines because most things can just be
> ran out of people's home directories.
>
> export PATH=~/bin:$PATH
If you mount /home with the noexec option, you won't be able to run any 
binaries from it.  (You can still run scripts, though, if the 
interpreter is available;  and a determined user will be able to run 
arbitrary binaries that way.)