forget what i just said about an alarm.  i'm getting sucked into that
"let's make the existing mechanism that's broken more complicated to
get around stupid users/silly attacks" syndrome.

perhaps just change chfn to acquire the lock after it knows it has
stuff to change?

acquiring the lock beforehand is "bad" in this instance.

-- 
|-----< "CODE WARRIOR" >-----|
andrew@echonyc.com (TheMan)        * "ah!  i see you have the internet
codewarrior@daemon.org                               that goes *ping*!"
warfare@graffiti.com      * "information is power -- share the wealth."