On Tue, Apr 13, 2010 at 8:36 AM, Robert Nesius <nesius at gmail.com> wrote:
>
> Why not just set their shell to a stub-shell that only allows them to
> run the passwd command, or allows them to log out?

I was just going to recommend this as well.

Look into Restricted shell (rsh). I've used it in the past for this
sort of thing, and it worked well.

-Erik