Protecting against downloads

[Bill Heiser - Unix Sys Admin]

A *ix sysop I communite with recently told me that he'd caught one of
his "shell-access" users downloading *ix binaries.  Since I'm getting
ready to set up my system for public access, this concerns me.  How
do you all who run public-access systems protect yourselves against this
kind of thing?  If it went on for long enough, the person could get 
himself an entire OS for free!!

As far as I can see, we either have to trust the users that we give
shell access to, or make kermit/sz, etc unavailable to them.  I guess
we could just make downloads only available thru the "bbs", rather than
from the shell ...

Anyone else have any ideas on this?  How do you all deal with this?

Bill


-- 
Work:    heiser at tdw201.ed.ray.com
	 {decuac,necntc,uunet}!rayssd!tdw201!heiser
Home(1): bill%unixland.uucp at world.std.com -or- uunet!world!unixland!bill
	 Public Access Unix Coming Soon!
Home(2): Bill.Heiser at f240.n322.z1.fidonet.org (BBS: 1-508-655-3848)
Other:	 heiser at world.std.com     (Pub. Access Unix)