Problem: I have a production server I don't trust anyone with. However I can't be the only person to be able to access it.

Realization: I need to allow people log in as root, but through a proxy so that whatever they type/send over ssh is logged on a proxy machine to which they actually don't have access (so they can't tamper with logs).

What's the ideal setup to do that? I've only come across tshark (SSH Logging all Comamnds), but I'm not actually sure it's good for the job and not sure how exactly do I set it up as people say it logs traffic on the protocol level and ssh encryption happens on the application level.

Can anyone provide a definitive tested solution for this?

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.