Problem: I have a production server I don't trust anyone with. However I can't be the only person to be able to access it.
Realization: I need to allow people log in as root, but through a proxy so that whatever they type/send over ssh is logged on a proxy machine to which they actually don't have access (so they can't tamper with logs).
What's the ideal setup to do that? I've only come across tshark (SSH Logging all Comamnds), but I'm not actually sure it's good for the job and not sure how exactly do I set it up as people say it logs traffic on the protocol level and ssh encryption happens on the application level.
Can anyone provide a definitive tested solution for this?