(open) sshd timeout

[Jacques B.]

Good idea about getting the idle time from the w command in the
.bash_logout.  However again that would be relying on a file that the
user can modify (their own .bash_logout file).  That is unless you
were to chmod the .bash_profile and .bash_logout to give execute only
access to the user.  Then they cannot override or change the settings
in .bash_profile, or change the w command in the .bash_logout.  You
could either automatically output the w command to a log file, or put
the bash script code in the .bash_logout to do the calculations and
only make an entry in a log if the timeout scenario was applicable. 
I'm guessing the user only needs to be able to execute those files,
not read or write it.

Jacques B.