All Questions
8 questions
0votes
2answers
98views
Letting a stranger in safely
I have setup a really tiny wireguard server in my home, with my public IP and all. I have used NAT to hopefully protect myself as much as possible, set strong passwords... All these things. A friend ...
0votes
1answer
68views
What config files I need to verify to make sudo work?
I am new to Linux. I have created 2 Azure VMs based on Cent OS 7.4 for learning purposes. For the first machine, I provided SSH keys during the create procedure. I use the private key via putty and ...
5votes
1answer
338views
Obtain sudo priviledge without sudo password
Context: Debian Linux. Alice has a user account on the machine. She is one of sudoers and has a secure password. She accesses the machine via SSH using a SSH key only (password will not work). By ...
5votes
2answers
613views
Permissions depending on how you login: ssh/su/sudo
As user I have access to a remote linux machine where I can: sudo su - other_user Among other things, this allows me to add my own public key to authorized_keys for other_user, which effectively also ...
7votes
1answer
228views
Send only one warning when the private key is not available
For added security, I would like to require a private key to use sudo on my Ubuntu Server box. I've added private key authentication for sudo as described at https://superuser.com/questions/164078/how-...
3votes
2answers
2kviews
Securely allowing users to create accounts
1) I'm struggling to find a secure way to allow new users to create accounts without granting them admin rights to do so. If you already have an account on my system and can work UNIX command line, ...
4votes
5answers
11kviews
How to securely automate running commands as root with "sudo su -"?
hint (on client side, how to encrypt files/pwd's): # encrypt pwd with ssh key: openssl rsa -in ~/.ssh/id_rsa -outform pem > ~/.ssh/TEMP-id_rsa.pem 2>/dev/null openssl rsa -in ~/.ssh/id_rsa -...
1vote
2answers
601views
how to require sudo to view files?
I have a ssh server. I allow people to connect to it if they want. I do my programming homework on it. I am in trouble with my teacher because people were cheating off it. I need to know how to ...