News for hackers. Stuff that matters.

A comment on Verelox Wiped by Ex-Admin. Parent comment

Re:Verelox Wiped by Ex-Admin by rcthompson on Friday June 09, 2017 @03:57PM (#14524002)
Maybe someone should implement a PAM module or something that requires authenticating as two different users with sudo privileges, so you can implement this for as many users as you like and let them each have a single password, instead of half of a password for each possible pair of users.
[ Parent | on HN ]
Re:Verelox Wiped by Ex-Admin by seanp2k2 on Friday June 09, 2017 @10:44PM (#14525896)
Use something with 2FA like e.g. https://duo.com/docs/duounix and give person A the password and person B the 2nd factor (phone with this Duo profile configured or whatever).
[ Parent | on HN ]
Re:Verelox Wiped by Ex-Admin by rcthompson on Saturday June 10, 2017 @05:35PM (#14529315)
That doesn't eliminate the need to set up an account & password for every possible pair of users, rather than just every user.
[ Parent | on HN ]
Re:Verelox Wiped by Ex-Admin by ars on Friday June 09, 2017 @05:35PM (#14524775)
If would also have to do session sharing so both people can watch each other and see what commands they run.
[ Parent | on HN ]