I have to give root access for a third-party sysadmin to do some work on my Linux severs, but I would prefer not to give them full root access.
What I'm thinking is that I could create a PHP script which would login via SSH, and therefore not require having to give the root password to the sysadmin. This way I could also easily log everything they do, to ensure they don't give themselves a backdoor, install something malicious, or attempt to access customer information from the databases.
So my questions are:
Do you think I am wise to be concerned about this? Or there another standard way of dealing with this issue? (Or perhaps no issue at all?)
I understand that PHP supports SSH functionality. Any open-source implementation that exists already for what I want? Is there anything else I need to consider?