allow a user to run a command as root over ssh

bl8n8r · External Since: May 11, 2007 Posts: 5

in ~/root/.ssh/authorized_keys

from="10.8.2.101",command="/root/bin/trafmon",no-port-forwarding,no-
X11-forwarding ssh-dss AAAABCUgqdk... J6n5dF6F8rKc= luser.TakeThisOut@int.foo.com

J.O. Aho · External Since: Mar 26, 2004 Posts: 2216

bl8n8r wrote:
> in ~/root/.ssh/authorized_keys
>
> from="10.8.2.101",command="/root/bin/trafmon",no-port-forwarding,no-
> X11-forwarding ssh-dss AAAABCUgqdk... J6n5dF6F8rKc= luser.RemoveThis@int.foo.com

root login to a system should be disabled, specially if the machine is
accessible from a public network.

Alternative method would be to login as unprivileged user and use sudo to
grant access to run a command.

--

//Aho