Controlling shared admin privileges

[Jorge Salamero Sanz]

Hi all,

I would like to ask what other sysadmins on this list use to keep an eye
on what's going on the servers where you share admin privileges with
other sysadmins and what good practices do you suggest:

* sudo to restrict what others can run

* etckeeper to track configuration changes

* does anybody use auditd to log all commands?

* anything else?

Cheers!