alt Hacker NewsI agree that this move is good.
But you should not type sudo passwords on remote machine. Instead setup your machinr to have nopassword for special sdmin account and enable pubkey only authentication.
Replies
Wowfunhappy • today at 5:47 PM
Why is it better to have a nopassword admin account when using a machine remotely? The point of SSH is to resist mitm attacks, right? If someone could watch my keystrokes, I think I'd have bigger problems!
wolvoleo • today at 5:21 PM
With sudo you can also give people specific access to commands.
I personally use the pam ssh agent module for this, that way you can use agent forwarding with sudo.
➕ show 1 reply
Yeah but am I going to really open another ssh connection just to run an admin specific command. They also didn't provide an admin user, it setup with all of the extra security configurations. You couldn't even `su`