27 | | /etc/sudoers is set up so that people don't need to type their passwords when sudo'ing. If users also set up ssh keys then this means that people can use very long, essentially uncrackable, passwords but never actually need to remember or use them unless they lose their local ssh key or they need to login via the consol. |
| 28 | /etc/sudoers is set up so that people don't need to type their passwords when sudo'ing. |
| 29 | |
| 30 | If you want to create a user and allow them to have ssh access but '''not''' sudo then they need to be in the sshaccess group: |
| 31 | |
| 32 | {{{ |
| 33 | kiwi:~# adduser -G sshaccess newusername |
| 34 | }}} |
| 35 | |
| 36 | If users set up ssh keys then this means that people can use very long, essentially uncrackable, passwords but never actually need to remember or use them unless they lose their local ssh key or they need to login via the consol. |