[clug] Detecting malicious former employees

[Michael Still]

Michael James wrote:

> Scripts are an excellent idea for disabling a normal account,
>  but it's a different ball game when the user had root.
> If there is even the possibility of premeditated maliciousness
>  then the machine has the same status as a hacked one,
>  "scheduled for re-build".

Wow. I agree in principle, but that's a mammoth task in a lot of 
environments...

Mikal