We are using Capistrano in some systems as a deploy system. The new sysadmin we have says that our setup is really dangerous and I would like to know how to fix it.
We have a deploy user called "foo" which we use to do the deployment":
cap deploy
This foo user is able to restart apache, clean tmp files and so on.
The problem is that if someone steals our private ssh key and acces to our machines as the foo user, is able to take down the website.
ssh foo@server <-- Able to shutdown apache!
How can we solve this security hole?
Are there other solutions to take in account?