Where I work, we have very light security policy which allows users to connect to their personal mail accounts and so on.
Every user is root on his own computer and there is no centralized account management. It's pretty much like all computers where standalone/personal computers on the same local area network.
The only exception is that the sys-admins demand that we put a key in our
/root/.ssh/authorized_keys so they can backup our files. Fair enough, except that I'm a bit paranoid.
I have nothing against having mandatory backups (I even agree it is a good thing) but on some occasion, I plug my personal ciphered usb key that contains my personal password database (keepass) and I'd like to avoid that its content gets backuped.
So here is my question:
Is there a way for me to automatically unmount the USB key volume or even better: to delay the root login from an external host until my usb key is unmounted/plugged ?
What would be the easiest/safest way to do that ?
Note: My employer actually agrees with this setup.
Note #2: Reading the comments, I would say I now understand what is wrong in asking that, and how it could seem I'm trying to piss my sysadmin. I can't blame anyone for not trusting me of course, and I sincerely want to apologize if at any point I made it sound like I was "smarter than the sysadmin" or anything. This question expected a purely technical answer but a purely technical answer would not have been a good answer. As they say: "Science without conscience is but the ruin of the soul..." Thanks to you all for your feedback.