remote SUDO with SSH

[Knapp]

On Sun, Aug 10, 2008 at 3:20 PM, Derek Broughton <news at pointerstop.ca> wrote:
> Knapp wrote:
>
>> On Sat, Aug 9, 2008 at 11:13 PM, Bruce Marshall <bmarsh at bmarsh.com> wrote:
>>> On Saturday 09 August 2008, Knapp wrote:
>>>> Is there a way to stop the use of sudo from ssh connections?
>>>>
>>>> Is there a way to turn this off? I turned off remote use of root but
>>>> that did not stop it.
>>>
>>> I guess I'm not sure just what you are asking.
>
>> If I sign into my computer remotely using SSH, I can then use SUDO to
>> change things in the computer. I would like this SUDO command not to
>> function when used my someone remotely.
>
> Then don't permit SSH access to any user with sudo permission.
> --
> derek

Thanks guys, now I see the answer. Make a new user for each remote
user and limit the heck out of it. All other normal users are not
allowed to use SSH.

But wait a minute, then you can't get at your personal info. :-(

There must be an easy way.

After the SSH mess I really don't want remote users to have su or sudo
access. Maybe I am to paranoid but my firewall reports at least 3 ssh
attempts per day and my web site does not even get that many hits.

Thanks for the ideas!!

-- 
Douglas E Knapp

http://sf-journey-creations.wikispot.org/Front_Page