remote SUDO with SSH

[Constantinos Maltezos]

On Sunday 10 August 2008 2:04:25 am Knapp wrote:
> On Sun, Aug 10, 2008 at 2:06 AM, Bruce Marshall <bmarsh at bmarsh.com> wrote:
> > On Saturday 09 August 2008, Knapp wrote:
> >> If I sign into my computer remotely using SSH, I can then use SUDO to
> >> change things in the computer. I would like this SUDO command not to
> >> function when used my someone remotely.
> >
> > Ok, you still haven't mentioned who you are logging in with.  The
> > 'normal' user who has root privs through sudo, or someone else such as
> > root.
> >
> > --
> > kubuntu-users mailing list
> > kubuntu-users at lists.ubuntu.com
> > Modify settings or unsubscribe at:
> > https://lists.ubuntu.com/mailman/listinfo/kubuntu-users
>
> Logging in as a user with sudo privileges an a computer without su.
> I want the user to have them when local but not when remote.

Now, I'm not as familiar with ssh as I should be, but I'm wondering if you 
could set it up to where only certain users could log in.  That way, you could 
create new users that can only run programs from a certain directory.  Then 
you would maybe make symbolic links to everything in /usr/bin and /bin (and 
wherever else you might have programs you'd want to link there) in that 
directory and remove the links for sudo and su.

But it all depends on if you can blacklist some users from logging in through 
ssh.