I have a LAMP running on Ubuntu. I want to grant access to some colleagues and friends to use my machine to upload their websites and do whatever they want in their home directories to which I have added virtual hosts. However, almost everything in the system can be read by anyone (apparently that is the default for ubuntu), this means that they can also read my projects where I have put all of my MySQL passwords and what not, which means that they can easily log into my server, since they have ssh access already. I know I can make my files with passwords only readable by me but that is not an absolute fix to the problem, perhaps in future I can forget to do that or I can somehow change the permissions unknowingly and this will still be a problem.
Perhaps if I do not allow users to use
mysql unless they are using
sudo will be sufficient IMO, but is it possible?