7 ms·
Maybe someone should implement a PAM module or something that requires authenticating as two different users with sudo privileges, so you can implement this for
by rcthompson 9y ago
Maybe someone should implement a PAM module or something that requires authenticating as two different users with sudo privileges, so you can implement this for as many users as you like and let them each have a single password, instead of half of a password for each possible pair of users.
- ars 9y agoIf would also have to do session sharing so both people can watch each other and see what commands they run.
- seanp2k2 9y agoUse something with 2FA like e.g. https://duo.com/docs/duounix https://duo.com/docs/duounix and give person A the password and person B the 2nd factor (phone with this Duo profile configured or whatever).
- rcthompson 9y agoThat doesn't eliminate the need to set up an account & password for every possible pair of users, rather than just every user.