A computer is being used for shift work currently with a shared account with autologin at boot. Certain UI applications start up at autologin and its important that they run continuously.
How can we securely authenticate individual users into this system (such as with smartcard) without ever logging out? The individual users only unlock and lock the screen with their credentials, they don't own the account per se, and the account never logs out.
A suggested method is to connect the console to a KVM that supports authentication. This would require physical security of the system having that open console, and trust in the KVM. Clearly better than what we're doing now. Is there an elegant in-computer solution? It seems like a window manager ought to be configurable or modifiable to do such a thing. Maybe there are tutorials on this and I'm simply not using the right search terms?