Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am having a problem, I have one server, I have my root account, but some other co worker has an ssh login, still... I have no so much experience and I dont know what I could do to block him to become super user or execute some jobs only with that user, what do I need to block to avoid that?

I am using Debian Linux.

share|improve this question
    
To be able to do so would be a huge security risk... –  vonbrand May 16 '13 at 10:58
    
yes, and im trying to avoid that, I installed a root kit hunter, but I dont know if are other ways (for some reasons i can't delete his user) –  juan May 16 '13 at 10:59

1 Answer 1

up vote 0 down vote accepted

Just keep the root password secret and remove him from the sudoers file. Also make sure to use a kernel not affected by this new exploit: http://fucksheep.org/~sd/warez/semtex.c ;)

share|improve this answer
    
If i am not using sudo, only su- is possible he could make me some damage through his user? –  juan May 16 '13 at 10:58
    
if he don't know the root password he can't - but you have to be careful that all your chmods are set cirrectly. maybe you want to lock him up inside a chroot? –  Pascal Schmiel May 16 '13 at 11:18
    
thats a pretty nice idea! thank you –  juan May 16 '13 at 13:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.