search for: allowed_keys

...oot via sulog and or external logging 2/ Protect root even if the root password is compromised 3/ Limit to a list of users who can access root To acheive the functional equivalent of this in ssh we require: rlogin still false to stop telnet connections, but ssh still allowing connections A set of allowed_keys that effectively would be an su group A tracking by ssh of which key allowed access at connection time ( ie an sulog equivelent ) ie: "ssh: root access granted via key joeblow at jupiter at 12:34" It is then possible for me to demonstrate to management that we do not require every admi...