[ec2] logging into instance via transmit

Scott Frazer sfrazer at gmail.com
Thu Jun 11 18:45:40 BST 2009

On Wed, Jun 10, 2009 at 7:47 PM, Micah Walter<micahwalter at me.com> wrote:
> anyway, the thinking here is that I can just give a few select people
> the key-pair so they can log in as ubuntu via transmit and upload any
> files without having to worry about SSHing and setting permissions...
> is there any obvious security issue doing this, other than the obvious
> one where I am handing out a key to someone other than myself?

If you hand out the key that's attached to the "ubuntu" user, then you
are also handing out the ability to gain root over the box (a simple
ssh / sudo -s and they are in)

As has been suggested already, a much better idea is to create a
separate user and create a separate key pair for them.

More information about the Ec2 mailing list