[nylug-talk] sudo vs 'ssh as root'

[Michael Bubb]

Hello


I remember a few years back reading an interesting security discussion
on sudo vs sshing as root into servers.

My company's current policy is to ssh in as root. I don't believe that
is the best way (ie most secure way) but I do not remember the
details. I seem to remember that sshing in as a regular user and then
elevating privileges. It is also easier to track mistakes this way.

This is, I realize, a fairly basic security question (which I am
cross-posting to SAGE). I have heard people who angrily declaim
sudo... but I have never gone through the process of figuring this out
for myself.

Any ideas? Good stuff to read on this?

Many thanks as always

Michael Bubb